PT-2019-19124 · Apple · Itunes For Windows+6

Hanqing Zhao + 1 · Published 2019-12-18 · Updated 2020-08-24 · CVE-2019-8628

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iOS versions prior to 12.3 macOS Mojave versions prior to 10.14.5 tvOS versions prior to 12.3 Safari versions prior to 12.1.1 iTunes for Windows versions prior to 12.9.5 iCloud for Windows versions prior to 7.12

Description The issue arises from multiple memory corruption problems that have been resolved through enhanced memory handling. Processing maliciously crafted web content may lead to arbitrary code execution.

Recommendations Update to iOS 12.3 or later. Update to macOS Mojave 10.14.5 or later. Update to tvOS 12.3 or later. Update to Safari 12.1.1 or later. Update to iTunes for Windows 12.9.5 or later. Update to iCloud for Windows 7.12 or later.

Fix

Memory Corruption

Weakness Enumeration

CWE-787

Related Identifiers

CVE-2019-8628

Affected Products

Safari

Icloud For Windows

Ios

Itunes

Itunes For Windows

Macos Mojave

Tvos

References · 9

• https://osv.dev/vulnerability/CVE-2019-8628 · Vendor Advisory
• https://support.apple.com/HT210124 · Vendor Advisory
• https://support.apple.com/HT210119 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-8628 · Security Note
• https://support.apple.com/HT210120 · Vendor Advisory
• https://support.apple.com/HT210123 · Vendor Advisory
• https://support.apple.com/HT210212 · Vendor Advisory
• https://support.apple.com/HT210125 · Vendor Advisory
• https://support.apple.com/HT210118 · Vendor Advisory