CVEvulnerability
CVE-2019-6233
8.8 HIGH
Official page ↗
- Status
- Modified
- Published
- 2019-03-05
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 8.8 HIGH — CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 6.8 MEDIUM — AV:N/AC:M/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-787
Description
A memory corruption issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, tvOS 12.1.2, Safari 12.0.3, iTunes 12.9.3 for Windows, iCloud for Windows 7.10. Processing maliciously crafted web content may lead to arbitrary code execution.
Affected configurations
• apple safari (< 12.0.3)
• apple iphone os (< 12.1.3)
• apple tvos (< 12.1.2)
• apple icloud (< 7.10)
• apple itunes (< 12.9.3)
Related
Weakness · CWE (1)
- CWE-787 Out-of-bounds Write weakness
References
- http://www.securityfocus.com/bid/106691 Third Party Advisory, VDB Entry
- https://security.gentoo.org/glsa/201903-12 Third Party Advisory
- https://support.apple.com/HT209443 Vendor Advisory
- https://support.apple.com/HT209447 Vendor Advisory
- https://support.apple.com/HT209449 Vendor Advisory
- https://support.apple.com/HT209450 Vendor Advisory
- https://support.apple.com/HT209451 Vendor Advisory
- http://www.securityfocus.com/bid/106691 Third Party Advisory, VDB Entry
- https://security.gentoo.org/glsa/201903-12 Third Party Advisory
- https://support.apple.com/HT209443 Vendor Advisory
- https://support.apple.com/HT209447 Vendor Advisory
- https://support.apple.com/HT209449 Vendor Advisory
- https://support.apple.com/HT209450 Vendor Advisory
- https://support.apple.com/HT209451 Vendor Advisory