PT-2019-10954 · Apple · Itunes For Windows+6

Published 2019-04-03 · Updated 2020-10-29 · CVE-2018-4474

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions: iCloud for Windows versions prior to 7.7 watchOS versions prior to 5 Safari versions prior to 12 iOS versions prior to 12 iTunes for Windows versions prior to 12.9 tvOS versions prior to 12

Description: A memory consumption issue was addressed with improved memory handling. The issue occurs due to an unexpected interaction that causes an ASSERT failure.

Recommendations: For iCloud for Windows versions prior to 7.7, update to version 7.7 or later. For watchOS versions prior to 5, update to version 5 or later. For Safari versions prior to 12, update to version 12 or later. For iOS versions prior to 12, update to version 12 or later. For iTunes for Windows versions prior to 12.9, update to version 12.9 or later. For tvOS versions prior to 12, update to version 12 or later.

Fix

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2018-4474

Affected Products

Safari

Icloud For Windows

Ios

Itunes

Itunes For Windows

Tvos

Watchos

References · 8

• https://osv.dev/vulnerability/CVE-2018-4474 · Vendor Advisory
• https://support.apple.com/en-us/HT209140 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2018-4474 · Security Note
• https://support.apple.com/en-us/HT209141 · Vendor Advisory
• https://support.apple.com/en-us/HT209106 · Vendor Advisory
• https://support.apple.com/en-us/HT209109 · Vendor Advisory
• https://support.apple.com/en-us/HT209108 · Vendor Advisory
• https://support.apple.com/en-us/HT209107 · Vendor Advisory