exploitDog

CVE-2024-44157

Опубликовано: 11 окт. 2024

Источник: nvd

CVSS3: 5.5

EPSS Низкий

Описание

A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 for Windows, iTunes 12.13.3 for Windows. Parsing a maliciously crafted video file may lead to unexpected system termination.

Ссылки

https://support.apple.com/en-us/121328
Vendor Advisory
https://support.apple.com/en-us/121441
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:apple:apple_tv:*:*:*:*:*:windows:*:*

Версия до 1.5.0.152 (исключая)

cpe:2.3:a:apple:itunes:*:*:*:*:*:windows:*:*

Версия до 12.13.3 (исключая)

EPSS

Процентиль: 23%

0.00076

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-787

CWE-120

Связанные уязвимости

GHSA-q557-m5m4-m7pc

CVSS3: 5.5

github

больше 1 года назад

A stack buffer overflow was addressed through improved input validation. This issue is fixed in Apple TV 1.5.0.152 for Windows, iTunes 12.13.3 for Windows. Parsing a maliciously crafted video file may lead to unexpected system termination.

EPSS

Процентиль: 23%

0.00076

Низкий

5.5 Medium

CVSS3

Дефекты

CWE-787

CWE-120