exploitDog

CVE-2019-8772

Опубликовано: 18 дек. 2019

Источник: nvd

CVSS3: 7.5

CVSS2: 5

EPSS Низкий

Описание

An issue existed in the handling of links in encrypted PDFs. This issue was addressed by adding a confirmation prompt. This issue is fixed in macOS Catalina 10.15. An attacker may be able to exfiltrate the contents of an encrypted PDF.

Ссылки

https://support.apple.com/HT210634
Release Notes
Vendor Advisory
https://support.apple.com/kb/HT210722
Release Notes
Vendor Advisory
https://support.apple.com/HT210634
Release Notes
Vendor Advisory
https://support.apple.com/kb/HT210722
Release Notes
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

cpe:2.3:o:apple:mac_os_x:*:*:*:*:*:*:*:*

Версия до 10.15 (исключая)

EPSS

Процентиль: 57%

0.00348

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo

Связанные уязвимости

GHSA-mhr9-83m9-mfgj

github

больше 3 лет назад

An issue existed in the handling of links in encrypted PDFs. This issue was addressed by adding a confirmation prompt. This issue is fixed in macOS Catalina 10.15. An attacker may be able to exfiltrate the contents of an encrypted PDF.

EPSS

Процентиль: 57%

0.00348

Низкий

7.5 High

CVSS3

5 Medium

CVSS2

Дефекты

NVD-CWE-noinfo