Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-6m96-8rvh-6274

Опубликовано: 24 мая 2022
Источник: github
Github: Не прошло ревью

Описание

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.

EPSS

Процентиль: 53%
0.003
Низкий

Дефекты

CWE-119
CWE-787

Связанные уязвимости

CVSS3: 8.8
ubuntu
около 5 лет назад

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS3: 8.8
redhat
почти 5 лет назад

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS3: 8.8
nvd
около 5 лет назад

A memory corruption issue was addressed with improved state management. This issue is fixed in iOS 13.5 and iPadOS 13.5, tvOS 13.4.5, watchOS 6.2.5, Safari 13.1.1, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing maliciously crafted web content may lead to arbitrary code execution.

CVSS3: 8.8
debian
около 5 лет назад

A memory corruption issue was addressed with improved state management ...

CVSS3: 8.8
fstec
около 5 лет назад

Уязвимость модулей отображения веб-страниц WebKitGTK и WPE WebKit операционных систем Apple iPadOS, watchOS, iOS, tvOS, браузера Safari, мультимедийного проигрывателя iTunes и сервиса iCloud для операционных систем Windows, позволяющая нарушителю выполнить произвольный код в целевой системе

EPSS

Процентиль: 53%
0.003
Низкий

Дефекты

CWE-119
CWE-787