CNVD-2020-19949

Vulnerability from cnvd - Published: 2020-03-29
VLAI Severity ?
Title
多款Apple产品WebKit组件输入验证错误漏洞
Description
Apple iOS等都是美国苹果（Apple）公司的产品。Apple iOS是一套为移动设备所开发的操作系统。Apple tvOS是一套智能电视操作系统。Apple macOS Mojave是一套专为Mac计算机所开发的专用操作系统。WebKit是其中的一个Web浏览器引擎组件。 多款Apple产品WebKit组件存在输入验证错误漏洞。攻击者可借助特制的Web内容利用该漏洞执行任意代码。
Severity
中
Patch Name
多款Apple产品WebKit组件输入验证错误漏洞的补丁
Patch Description
Apple iOS等都是美国苹果（Apple）公司的产品。Apple iOS是一套为移动设备所开发的操作系统。Apple tvOS是一套智能电视操作系统。Apple macOS Mojave是一套专为Mac计算机所开发的专用操作系统。WebKit是其中的一个Web浏览器引擎组件。 多款Apple产品WebKit组件存在输入验证错误漏洞。攻击者可借助特制的Web内容利用该漏洞执行任意代码。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

厂商已发布了漏洞修复程序，请及时关注更新： https://support.apple.com/en-us/HT210122 https://support.apple.com/en-us/HT210123 https://support.apple.com/en-us/HT210120

https://support.apple.com/en-us/HT210118 https://support.apple.com/en-us/HT210119 https://support.apple.com/en-us/HT210124 https://support.apple.com/en-us/HT210125 https://support.apple.com/en-us/HT210212

Reference
https://nvd.nist.gov/vuln/detail/CVE-2019-8601
Impacted products
Name
['Apple macOS Mojave <10.14.5', 'Apple Safari <12.1.1', 'Apple Apple iOS <12.3', 'Apple tvOS <12.3', 'Apple Apple watchOS <5.2.1', 'Apple iTunes for Windows <12.9.5', 'Apple iCloud for Windows <7.12', 'Apple iCloud for Windows <10.4']
Show details on source website
To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-8601",
      "cveUrl": "https://nvd.nist.gov/vuln/detail/CVE-2019-8601"
    }
  },
  "description": "Apple iOS\u7b49\u90fd\u662f\u7f8e\u56fd\u82f9\u679c\uff08Apple\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Apple iOS\u662f\u4e00\u5957\u4e3a\u79fb\u52a8\u8bbe\u5907\u6240\u5f00\u53d1\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002Apple tvOS\u662f\u4e00\u5957\u667a\u80fd\u7535\u89c6\u64cd\u4f5c\u7cfb\u7edf\u3002Apple macOS Mojave\u662f\u4e00\u5957\u4e13\u4e3aMac\u8ba1\u7b97\u673a\u6240\u5f00\u53d1\u7684\u4e13\u7528\u64cd\u4f5c\u7cfb\u7edf\u3002WebKit\u662f\u5176\u4e2d\u7684\u4e00\u4e2aWeb\u6d4f\u89c8\u5668\u5f15\u64ce\u7ec4\u4ef6\u3002\n\n\u591a\u6b3eApple\u4ea7\u54c1WebKit\u7ec4\u4ef6\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684Web\u5185\u5bb9\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002",
  "formalWay": "\u5382\u5546\u5df2\u53d1\u5e03\u4e86\u6f0f\u6d1e\u4fee\u590d\u7a0b\u5e8f\uff0c\u8bf7\u53ca\u65f6\u5173\u6ce8\u66f4\u65b0\uff1a\r\nhttps://support.apple.com/en-us/HT210122\r\nhttps://support.apple.com/en-us/HT210123\r\nhttps://support.apple.com/en-us/HT210120\r\n\r\nhttps://support.apple.com/en-us/HT210118\r\nhttps://support.apple.com/en-us/HT210119\r\nhttps://support.apple.com/en-us/HT210124\r\nhttps://support.apple.com/en-us/HT210125\r\nhttps://support.apple.com/en-us/HT210212",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2020-19949",
  "openTime": "2020-03-29",
  "patchDescription": "Apple iOS\u7b49\u90fd\u662f\u7f8e\u56fd\u82f9\u679c\uff08Apple\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Apple iOS\u662f\u4e00\u5957\u4e3a\u79fb\u52a8\u8bbe\u5907\u6240\u5f00\u53d1\u7684\u64cd\u4f5c\u7cfb\u7edf\u3002Apple tvOS\u662f\u4e00\u5957\u667a\u80fd\u7535\u89c6\u64cd\u4f5c\u7cfb\u7edf\u3002Apple macOS Mojave\u662f\u4e00\u5957\u4e13\u4e3aMac\u8ba1\u7b97\u673a\u6240\u5f00\u53d1\u7684\u4e13\u7528\u64cd\u4f5c\u7cfb\u7edf\u3002WebKit\u662f\u5176\u4e2d\u7684\u4e00\u4e2aWeb\u6d4f\u89c8\u5668\u5f15\u64ce\u7ec4\u4ef6\u3002\r\n\r\n\u591a\u6b3eApple\u4ea7\u54c1WebKit\u7ec4\u4ef6\u5b58\u5728\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u501f\u52a9\u7279\u5236\u7684Web\u5185\u5bb9\u5229\u7528\u8be5\u6f0f\u6d1e\u6267\u884c\u4efb\u610f\u4ee3\u7801\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "\u591a\u6b3eApple\u4ea7\u54c1WebKit\u7ec4\u4ef6\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Apple macOS Mojave \u003c10.14.5",
      "Apple Safari \u003c12.1.1",
      "Apple  Apple iOS \u003c12.3",
      "Apple tvOS \u003c12.3",
      "Apple  Apple watchOS \u003c5.2.1",
      "Apple  iTunes for Windows \u003c12.9.5",
      "Apple  iCloud for Windows \u003c7.12",
      "Apple  iCloud for Windows \u003c10.4"
    ]
  },
  "referenceLink": "https://nvd.nist.gov/vuln/detail/CVE-2019-8601",
  "serverity": "\u4e2d",
  "submitTime": "2019-08-28",
  "title": "\u591a\u6b3eApple\u4ea7\u54c1WebKit\u7ec4\u4ef6\u8f93\u5165\u9a8c\u8bc1\u9519\u8bef\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or observed by the user.
  • Confirmed: The vulnerability has been validated from an analyst's perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
  • Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
  • Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
  • Not confirmed: The user expressed doubt about the validity of the vulnerability.
  • Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.



Detection rules are retrieved from Rulezet.