CVE-2019-8592
CVE-2019-8592
Vexday Risk Score
3Bajo
Decisión SSVC (CISA)
Track
Sin señal de explotación → monitorear
CVSS —EPSS 1.2%KEV nãoPoC —Nuclei —Metasploit —Patch —
Ciclo de vida
27 oct 2020Publicada en NVD
Recomendación: Monitorear — sin señal de explotación por ahora.
A memory corruption issue was addressed with improved input validation. This issue is fixed in macOS Catalina 10.15, tvOS 12.3, watchOS 5.2.1, tvOS 13, macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006, macOS Mojave 10.14.5, Security Update 2019-003 High Sierra, Security Update 2019-003 Sierra, iOS 12.3, iOS 13. Playing a malicious audio file may lead to arbitrary code execution.
¿Quieres saber si tu infraestructura está expuesta a esto?
Hablar con TrueHacking →Referencias
https://support.apple.com/en-us/HT210118https://support.apple.com/en-us/HT210119https://support.apple.com/en-us/HT210120https://support.apple.com/en-us/HT210122https://support.apple.com/en-us/HT210604https://support.apple.com/en-us/HT210606https://support.apple.com/en-us/HT210634https://support.apple.com/en-us/HT210722