PT-2020-6105 · Apple+7 · Ipados+15
Insu_Yun_En
+2
·
Published
2020-05-20
·
Updated
2023-01-09
·
CVE-2020-9850
CVSS v2.0
10
Critical
| Vector | AV:N/AC:L/Au:N/C:C/I:C/A:C |
Name of the Vulnerable Software and Affected Versions
Safari versions prior to 13.1.1
iOS versions prior to 13.5
iPadOS versions prior to 13.5
tvOS versions prior to 13.4.5
watchOS versions prior to 6.2.5
iTunes for Windows version prior to 12.10.7
iCloud for Windows versions prior to 11.2 and 7.19
Description
The issue is related to a logic problem in the WebKit module, which can be exploited by a remote attacker using malicious web content to execute arbitrary code. This is due to an incorrect implementation of the sequence of actions performed. A remote attacker may be able to cause arbitrary code execution.
Recommendations
For Safari version prior to 13.1.1, update to version 13.1.1 or later.
For iOS version prior to 13.5, update to version 13.5 or later.
For iPadOS version prior to 13.5, update to version 13.5 or later.
For tvOS version prior to 13.4.5, update to version 13.4.5 or later.
For watchOS version prior to 6.2.5, update to version 6.2.5 or later.
For iTunes for Windows version prior to 12.10.7, update to version 12.10.7 or later.
For iCloud for Windows versions prior to 11.2 and 7.19, update to version 11.2 or 7.19 or later.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Almalinux
Centos
Linuxmint
Red Hat
Rocky Linux
Safari
Suse
Ubuntu
Webkit
Icloud For Windows
Ios
Ipados
Itunes
Itunes For Windows
Tvos
Watchos