PT-2019-19206 · Apple · Apple Macos

Christian Mainka + 5 · Published 2019-12-18 · Updated 2022-01-01 · CVE-2019-8772

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions macOS versions prior to 10.15

Description An issue existed in the handling of links in encrypted PDFs, which could allow an attacker to exfiltrate the contents of an encrypted PDF. This issue was addressed by adding a confirmation prompt.

Recommendations For versions prior to 10.15, update to macOS Catalina 10.15 to resolve the issue.

Fix

Related Identifiers

CVE-2019-8772

Affected Products

Apple Macos

References · 4

• https://nvd.nist.gov/vuln/detail/CVE-2019-8772 · Security Note
• https://osv.dev/vulnerability/CVE-2019-8772 · Vendor Advisory
• https://support.apple.com/kb/HT210722 · Vendor Advisory
• https://support.apple.com/HT210634 · Vendor Advisory