PT-2019-19202 · Apple+5 · Watchos+7

Publicado

2019-11-04

·

Atualizado

2024-06-15

·

CVE-2019-8766

CVSS v3.1

8.8

Alta

VetorAV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions watchOS versions prior to 6.1 iCloud for Windows versions prior to 11.0
Description The issue arises from multiple memory corruption problems that have been resolved through enhanced memory handling. Processing maliciously crafted web content may lead to arbitrary code execution.
Recommendations For watchOS versions prior to 6.1, update to watchOS 6.1 to resolve the issue. For iCloud for Windows versions prior to 11.0, update to iCloud for Windows 11.0 to resolve the issue.

Exploit

Correção

Memory Corruption

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-787

Identificadores relacionados

ALSA-2020:4451
CESA-2020_4035
CESA-2020_4451
CVE-2019-8766
DSA-4558-1
MGASA-2019-0324
OPENSUSE-SU-2019:2587-1
OPENSUSE-SU-2019:2591-1
OPENSUSE-SU-2019_2587-1
OPENSUSE-SU-2019_2591-1
OPENSUSE-SU-2022:0182-1
OPENSUSE-SU-2022_0182-1
OPENSUSE-SU-2022_0182-2
OPENSUSE-SU-2024:11506-1
RHSA-2020:4035
RHSA-2020:4451
RHSA-2020_4035
RHSA-2020_4451
RLSA-2020:4451
SUSE-SU-2019:3044-1
SUSE-SU-2020:1135-1
SUSE-SU-2022:0142-1
SUSE-SU-2022:0182-1
SUSE-SU-2022:0182-2
SUSE-SU-2022:0183-1

Produtos afetados

Almalinux
Centos
Red Hat
Rocky Linux
Suse
Icloud For Windows
Itunes
Watchos