PT-2019-10809 · Apple · Itunes For Windows+4

Published 2019-01-11 · Updated 2019-01-17 · CVE-2018-4147

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iCloud for Windows versions prior to 7.3 Safari versions prior to 11.0.3 iTunes for Windows versions prior to 12.7.3 iOS versions prior to 11.2.5

Description Multiple memory corruption issues were found, which have been addressed with improved memory handling.

Recommendations For iCloud for Windows versions prior to 7.3, update to version 7.3 or later. For Safari versions prior to 11.0.3, update to version 11.0.3 or later. For iTunes for Windows versions prior to 12.7.3, update to version 12.7.3 or later. For iOS versions prior to 11.2.5, update to version 11.2.5 or later.

Fix

Buffer Overflow

Weakness Enumeration

CWE-119

Related Identifiers

CVE-2018-4147

Affected Products

Safari

Icloud For Windows

Ios

Itunes

Itunes For Windows

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2018-4147 · Security Note
• https://support.apple.com/HT208475 · Vendor Advisory
• https://support.apple.com/HT208473 · Vendor Advisory
• https://support.apple.com/HT208474 · Vendor Advisory
• https://support.apple.com/HT208465 · Vendor Advisory
• https://support.apple.com/HT208463 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2018-4147 · Vendor Advisory