PT-2020-6104 · Apple+7 · Safari+15
Wen Xu
·
Published
2020-05-20
·
Updated
2022-02-17
·
CVE-2020-9803
CVSS v2.0
9.3
High
| Vector | AV:N/AC:M/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Safari versions prior to 13.1.1
iOS versions prior to 13.5
iPadOS versions prior to 13.5
tvOS versions prior to 13.4.5
watchOS versions prior to 6.2.5
iTunes for Windows version prior to 12.10.7
iCloud for Windows versions prior to 11.2 and 7.19
Description
The issue is related to a memory corruption problem in the WebKit module, which can be exploited by processing maliciously crafted web content, potentially leading to arbitrary code execution. This can be achieved by a remote attacker using harmful web content.
Recommendations
For Safari version prior to 13.1.1, update to version 13.1.1 or later.
For iOS version prior to 13.5, update to version 13.5 or later.
For iPadOS version prior to 13.5, update to version 13.5 or later.
For tvOS version prior to 13.4.5, update to version 13.4.5 or later.
For watchOS version prior to 6.2.5, update to version 6.2.5 or later.
For iTunes for Windows version prior to 12.10.7, update to version 12.10.7 or later.
For iCloud for Windows versions prior to 11.2 and 7.19, update to version 11.2 or 7.19 or later.
Exploit
Fix
Buffer Overflow
Memory Corruption
RCE
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Almalinux
Centos
Linuxmint
Red Hat
Rocky Linux
Safari
Suse
Ubuntu
Webkit
Icloud For Windows
Ios
Ipados
Itunes
Itunes For Windows
Tvos
Watchos