PT-2019-19165 · Apple+4 · Itunes For Windows+7

Sergei Glazunov

·

Publicado

2019-09-04

·

Atualizado

2024-06-15

·

CVE-2019-8719

CVSS v3.1

6.1

Média

VetorAV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Name of the Vulnerable Software and Affected Versions Apple tvOS versions prior to 13 iTunes for Windows versions prior to 12.10.1 iCloud for Windows versions prior to 10.7 and 7.14
Description A logic issue was addressed with improved state management. Processing maliciously crafted web content may lead to universal cross-site scripting. This issue allows attackers to conduct a universal cross-site scripting attack via specially crafted web content.
Recommendations For tvOS versions prior to 13, update to tvOS 13 to resolve the issue. For iTunes for Windows versions prior to 12.10.1, update to iTunes for Windows 12.10.1 to resolve the issue. For iCloud for Windows versions prior to 10.7 and 7.14, update to iCloud for Windows 10.7 or 7.14 to resolve the issue.

Exploit

Correção

XSS

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-79

Identificadores relacionados

ALT-PU-2020-1239
CESA-2020_4035
CVE-2019-8719
DSA-4515-1
MGASA-2019-0324
OPENSUSE-SU-2019:2587-1
OPENSUSE-SU-2019:2591-1
OPENSUSE-SU-2019_2587-1
OPENSUSE-SU-2019_2591-1
OPENSUSE-SU-2024:11506-1
RHSA-2020:4035
RHSA-2020_4035
SUSE-SU-2019:3044-1
SUSE-SU-2022:0142-1

Produtos afetados

Alt Linux
Centos
Red Hat
Suse
Icloud For Windows
Itunes
Itunes For Windows
Tvos