PT-2019-19247 · Apple+6 · Icloud+11
Mike Zhang
·
Publicado
2019-12-19
·
Atualizado
2024-06-15
·
CVE-2019-8835
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Apple Safari versions prior to 13.0.4
Apple tvOS versions prior to 13.3
Apple iOS versions prior to 13.3
Apple iPadOS versions prior to 13.3
Apple iTunes for Windows versions prior to 12.10.3
Apple iCloud for Windows versions prior to 10.9 and prior to 7.16
Description
The issue is related to multiple memory corruption problems that have been addressed with improved memory handling. Processing maliciously crafted web content may lead to arbitrary code execution.
Recommendations
For Apple Safari versions prior to 13.0.4, update to version 13.0.4 or later.
For Apple tvOS versions prior to 13.3, update to version 13.3 or later.
For Apple iOS versions prior to 13.3, update to version 13.3 or later.
For Apple iPadOS versions prior to 13.3, update to version 13.3 or later.
For Apple iTunes for Windows versions prior to 12.10.3, update to version 12.10.3 or later.
For Apple iCloud for Windows versions prior to 10.9 and prior to 7.16, update to version 10.9 or version 7.16 or later.
Exploit
Correção
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Enumeração de Fraquezas
Identificadores relacionados
Produtos afetados
Almalinux
Centos
Red Hat
Rocky Linux
Safari
Suse
Ubuntu
Icloud
Ios
Ipados
Itunes
Tvos