ByteOS Network

Vulnerability Details :

CVE-2019-8677

Assigner-apple

Assigner Org ID-286789f9-fbc2-4510-9f9a-43facdede74c

Published At-18 Dec, 2019 | 17:33

Updated At-04 Aug, 2024 | 21:24

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

EPSS History

Score

Latest Score

N/A

Percentile

Latest Percentile

N/A

▼Common Vulnerabilities and Exposures (CVE)

cve.org

Assigner:apple

Assigner Org ID:286789f9-fbc2-4510-9f9a-43facdede74c

Published At:18 Dec, 2019 | 17:33

Updated At:04 Aug, 2024 | 21:24

▼CVE Numbering Authority (CNA)

Affected Products

Vendor

Apple Inc.

Product

iOS

Versions

Affected

From unspecified before iOS 12.4 (custom)

Vendor

Apple Inc.

Product

macOS

Versions

Affected

From unspecified before macOS Mojave 10.14.6 (custom)

Vendor

Apple Inc.

Product

tvOS

Versions

Affected

From unspecified before tvOS 12.4 (custom)

Vendor

Apple Inc.

Product

Safari

Versions

Affected

From unspecified before Safari 12.1.2 (custom)

Vendor

Apple Inc.

Product

iTunes for Windows

Versions

Affected

From unspecified before iTunes for Windows 12.9.6 (custom)

Vendor

Apple Inc.

Product

iCloud for Windows

Versions

Affected

From unspecified before iCloud for Windows 7.13 (custom)

Vendor

Apple Inc.

Product

iCloud for Windows (Microsoft Store)

Versions

Affected

From unspecified before iCloud for Windows 10.6 (custom)

Problem Types

Type	CWE ID	Description
text	N/A	Processing maliciously crafted web content may lead to arbitrary code execution

Type: text

CWE ID: N/A

Description: Processing maliciously crafted web content may lead to arbitrary code execution

References

Hyperlink	Resource
https://support.apple.com/HT210346	x_refsource_MISC
https://support.apple.com/HT210348	x_refsource_MISC
https://support.apple.com/HT210351	x_refsource_MISC
https://support.apple.com/HT210355	x_refsource_MISC
https://support.apple.com/HT210356	x_refsource_MISC
https://support.apple.com/HT210357	x_refsource_MISC
https://support.apple.com/HT210358	x_refsource_MISC

Hyperlink: https://support.apple.com/HT210346

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/HT210348

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/HT210351

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/HT210355

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/HT210356

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/HT210357

Resource:

x_refsource_MISC

Hyperlink: https://support.apple.com/HT210358

Resource:

x_refsource_MISC

▼Authorized Data Publishers (ADP)

CVE Program Container

References

Hyperlink	Resource
https://support.apple.com/HT210346	x_refsource_MISC x_transferred
https://support.apple.com/HT210348	x_refsource_MISC x_transferred
https://support.apple.com/HT210351	x_refsource_MISC x_transferred
https://support.apple.com/HT210355	x_refsource_MISC x_transferred
https://support.apple.com/HT210356	x_refsource_MISC x_transferred
https://support.apple.com/HT210357	x_refsource_MISC x_transferred
https://support.apple.com/HT210358	x_refsource_MISC x_transferred

Hyperlink: https://support.apple.com/HT210346

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/HT210348

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/HT210351

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/HT210355

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/HT210356

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/HT210357

Resource:

x_refsource_MISC

x_transferred

Hyperlink: https://support.apple.com/HT210358

Resource:

x_refsource_MISC

x_transferred

▼National Vulnerability Database (NVD)

nvd.nist.gov

Source:product-security@apple.com

Published At:18 Dec, 2019 | 18:15

Updated At:24 Aug, 2020 | 17:37

Date Added	Due Date	Vulnerability Name	Required Action
	N/A

Metrics

Type	Version	Base score	Base severity	Vector
Primary	3.1	8.8	HIGH	CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Primary	2.0	6.8	MEDIUM	AV:N/AC:M/Au:N/C:P/I:P/A:P

Type: Primary

Version: 3.1

Base score: 8.8

Base severity: HIGH

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Type: Primary

Version: 2.0

Base score: 6.8

Base severity: MEDIUM

Vector:

AV:N/AC:M/Au:N/C:P/I:P/A:P

CPE Matches

Apple Inc.

>>icloud>>Versions before 7.13(exclusive)

cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*

Apple Inc.

>>icloud>>Versions from 10.0(inclusive) to 10.6(exclusive)

cpe:2.3:a:apple:icloud:*:*:*:*:*:windows:*:*

Apple Inc.

>>itunes>>Versions before 12.9.6(exclusive)

cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*

Apple Inc.

>>safari>>Versions before 12.1.2(exclusive)

cpe:2.3:a:apple:safari:*:*:*:*:*:*:*:*

Apple Inc.

>>iphone_os>>Versions before 12.4(exclusive)

cpe:2.3:o:apple:iphone_os:*:*:*:*:*:*:*:*

Apple Inc.

>>mac_os_x>>Versions before 10.14.6(exclusive)

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Apple Inc.

>>tvos>>Versions before 12.4(exclusive)

cpe:2.3:o:apple:tvos:*:*:*:*:*:*:*:*

Weaknesses

CWE ID	Type	Source
CWE-787	Primary	nvd@nist.gov

CWE ID: CWE-787

Type: Primary

Source: nvd@nist.gov