CVE-2019-6217

EPSS 1.8%

Vexday Risk Score

3Bajo

Decisión SSVC (CISA)

Track

Sin señal de explotación → monitorear

CVSS —EPSS 1.8%KEV nãoPoC —Nuclei —Metasploit —Patch referenciado

Ciclo de vida

05 mar 2019Publicada en NVD

Recomendación: Monitorear — sin señal de explotación por ahora.

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, watchOS 5.1.3, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.

Productos afectados

Apple · iCloud for Windows Apple · iOS Apple · iTunes for Windows Apple · Safari Apple · tvOS Apple · watchOS

¿Quieres saber si tu infraestructura está expuesta a esto?

Hablar con TrueHacking →

Referencias

https://security.gentoo.org/glsa/201903-12 https://support.apple.com/HT209443 https://support.apple.com/HT209447 https://support.apple.com/HT209448 https://support.apple.com/HT209449 https://support.apple.com/HT209450 https://support.apple.com/HT209451 http://www.securityfocus.com/bid/106699