PT-2019-19076 · Apple · Sierra+2

Publicado 2019-04-29 · Atualizado 2020-10-29 · CVE-2019-8534

Positive Technologies (AI Summary)

CVSS v2.0

7.2

Alta

Vetor base

AV:L/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.14.4 Security Update versions prior to 2019-002 for High Sierra and Sierra

Description A logic issue resulted in memory corruption, allowing a malicious application to potentially execute arbitrary code with kernel privileges. This issue was addressed with improved state management.

Recommendations For macOS versions prior to 10.14.4, update to macOS Mojave 10.14.4 or later to resolve the issue. For High Sierra and Sierra, apply Security Update 2019-002 or later to fix the problem.

Correção

Memory Corruption

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

CVE-2019-8534

ZDI-19-422

Produtos afetados

High Sierra

Sierra

Apple Macos

Referências · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-8534 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2019-8534 · Aviso do Fabricante
• https://support.apple.com/en-us/HT209600 · Aviso do Fabricante
• https://zerodayinitiative.com/advisories/ZDI-19-422 · Nota de Segurança