PT-2019-4955 · Apple+7 · Safari+13
Publicado
2019-04-10
·
Atualizado
2021-05-18
·
CVE-2019-8544
CVSS v2.0
9.3
Alta
| Vetor | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
iOS versions prior to 12.2
tvOS versions prior to 12.2
watchOS versions prior to 5.2
Safari versions prior to 12.1
iTunes versions prior to 12.9.4 for Windows
iCloud for Windows versions prior to 7.11
WebKitGTK (affected versions not specified)
WPE WebKit (affected versions not specified)
Description
The issue is related to a memory corruption problem that can be exploited by processing maliciously crafted web content, potentially leading to arbitrary code execution. This can be achieved by a remote attacker using a specially designed web page or file. The estimated number of potentially affected devices and real-world incidents are not specified.
Recommendations
For iOS version prior to 12.2, update to iOS 12.2 or later.
For tvOS version prior to 12.2, update to tvOS 12.2 or later.
For watchOS version prior to 5.2, update to watchOS 5.2 or later.
For Safari version prior to 12.1, update to Safari 12.1 or later.
For iTunes version prior to 12.9.4 for Windows, update to iTunes 12.9.4 for Windows or later.
For iCloud for Windows version prior to 7.11, update to iCloud for Windows 7.11 or later.
For WebKitGTK and WPE WebKit, at the moment, there is no information about a newer version that contains a fix for this issue.
Correção
Buffer Overflow
Memory Corruption
Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
Identificadores relacionados
Produtos afetados
Almalinux
Centos
Red Hat
Rocky Linux
Safari
Suse
Ubuntu
Wpe Webkit
Webkitgtk
Icloud
Ios
Itunes
Tvos
Watchos