PT-2019-2627 · Apple+2 · Icloud+7
Dwfault
·
Publicado
2019-03-25
·
Atualizado
2020-08-24
·
CVE-2019-6201
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
iOS versions prior to 12.2
tvOS versions prior to 12.2
Safari versions prior to 12.1
iTunes versions prior to 12.9.4 for Windows
iCloud for Windows versions prior to 7.11
WebKitGTK (affected versions not specified)
WPE WebKit (affected versions not specified)
Description
The issue is related to memory corruption and buffer overflow, which may lead to arbitrary code execution when processing maliciously crafted web content. A remote attacker can exploit this issue by using a specially crafted web page.
Recommendations
For iOS versions prior to 12.2, update to iOS 12.2 or later.
For tvOS versions prior to 12.2, update to tvOS 12.2 or later.
For Safari versions prior to 12.1, update to Safari 12.1 or later.
For iTunes versions prior to 12.9.4 for Windows, update to iTunes 12.9.4 for Windows or later.
For iCloud for Windows versions prior to 7.11, update to iCloud for Windows 7.11 or later.
For WebKitGTK and WPE WebKit, at the moment, there is no information about a newer version that contains a fix for this vulnerability.
Buffer Overflow
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Safari
Suse
Wpe Webkit
Webkitgtk
Icloud
Ios
Itunes
Tvos