Уязвимость выполнения произвольного кода в продуктах Apple при обработке вредоносного веб-контента из-за повреждения памяти
Описание
Множественные уязвимости повреждения памяти были устранены улучшенной обработкой памяти. Обработка специально созданного вредоносного веб-контента может привести к выполнению произвольного кода.
Затронутые версии ПО
- iOS до версии 13.2
- iPadOS до версии 13.2
- tvOS до версии 13.2
- watchOS до версии 6.1
- Safari до версии 13.0.3
- iTunes for Windows до версии 12.10.2
Тип уязвимости
Выполнение произвольного кода
Ссылки
- Third Party Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Third Party Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
- Vendor Advisory
Уязвимые конфигурации
Одно из
EPSS
8.8 High
CVSS3
6.8 Medium
CVSS2
Дефекты
Связанные уязвимости
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2. Processing maliciously crafted web content may lead to arbitrary code execution.
Multiple memory corruption issues were addressed with improved memory ...
Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.2 and iPadOS 13.2, tvOS 13.2, watchOS 6.1, Safari 13.0.3, iTunes for Windows 12.10.2. Processing maliciously crafted web content may lead to arbitrary code execution.
EPSS
8.8 High
CVSS3
6.8 Medium
CVSS2