CVE-2019-8600: falha em Apple iOS
Publicada em · Atualizada em
Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.
8Vexday Risk Score
Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.
ssvc Trackepss 20%
A memory corruption issue was addressed with improved input validation. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, watchOS 5.2.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. A maliciously crafted SQL query may lead to arbitrary code execution.
Produtos afetados
Apple · iCloud for WindowsApple · iOSApple · iTunes for WindowsApple · macOSApple · tvOSApple · watchOSCVEs relacionadas — Apple iOS
No mesmo produto, das mais perigosas para as menos.
Referências
https://research.checkpoint.com/2019/select-code_execution-from-using-sqlite/https://support.apple.com/HT210118https://support.apple.com/HT210119https://support.apple.com/HT210120https://support.apple.com/HT210122https://support.apple.com/HT210124https://support.apple.com/HT210125https://support.apple.com/HT210212