PT-2020-11240 · Apple · Facetime+2

Published 2020-10-27 · Updated 2020-10-30 · CVE-2019-7288

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions macOS Mojave versions prior to 10.14.3 Supplemental Update iOS versions prior to 12.1.4

Description The issue was related to the FaceTime service, specifically with Live Photos, and was addressed with improved validation on the FaceTime server. A thorough security audit of the FaceTime service uncovered this issue.

Recommendations For macOS Mojave versions prior to 10.14.3 Supplemental Update, update to macOS Mojave 10.14.3 Supplemental Update. For iOS versions prior to 12.1.4, update to iOS 12.1.4.

Fix

Related Identifiers

CVE-2019-7288

Affected Products

Facetime

Ios

Macos Mojave

References · 4

• https://support.apple.com/en-us/HT209520 · Vendor Advisory
• https://support.apple.com/en-us/HT209521 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2019-7288 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2019-7288 · Security Note