Home

CVE-2019-8735

Description

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in tvOS 13, iTunes for Windows 12.10.1, iCloud for Windows 10.7, iCloud for Windows 7.14. Processing maliciously crafted web content may lead to arbitrary code execution.

Risk Information

Base Score
8.8
MODERATE
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
1.106

Associated Vulnerability

VulnerabilityOS Platform
Unquoted service path vulnerability and multiple other vulnerabilities for Apple iTunesWindows
Unquoted service path vulnerability and multiple other vulnerabilities for Apple iTunes (x64)Windows
Unquoted service path vulnerability and multiple other vulnerabilities for Apple iCloudWindows
Multiple vulnerabilities fixed in iCloud 10.7Windows
Multiple Vulnerabilities are affected in Apple iTunes (X64) 12.9.6Windows
Multiple Vulnerabilities are affected in Apple iTunes 12.9.6Windows
Multiple Vulnerabilities are affected in Apple iTunes (X64) 12.10.0Windows
Multiple Vulnerabilities are affected in Apple iTunes 12.10.0Windows
(RHSA-2020:4035) webkitgtk4 security, bug fix, and enhancement update webkitgtk4-2.28.2-2.el7.i686.rpmLinux
(RHSA-2020:4035) webkitgtk4 security, bug fix, and enhancement update webkitgtk4-2.28.2-2.el7.x86_64.rpmLinux
(RHSA-2020:4035) webkitgtk4 security, bug fix, and enhancement update webkitgtk4-devel-2.28.2-2.el7.i686.rpmLinux
(RHSA-2020:4035) webkitgtk4 security, bug fix, and enhancement update webkitgtk4-devel-2.28.2-2.el7.x86_64.rpmLinux
(RHSA-2020:4035) webkitgtk4 security, bug fix, and enhancement update webkitgtk4-doc-2.28.2-2.el7.noarch.rpmLinux
(RHSA-2020:4035) webkitgtk4 security, bug fix, and enhancement update webkitgtk4-jsc-2.28.2-2.el7.i686.rpmLinux
(RHSA-2020:4035) webkitgtk4 security, bug fix, and enhancement update webkitgtk4-jsc-2.28.2-2.el7.x86_64.rpmLinux
(RHSA-2020:4035) webkitgtk4 security, bug fix, and enhancement update webkitgtk4-jsc-devel-2.28.2-2.el7.i686.rpmLinux
(RHSA-2020:4035) webkitgtk4 security, bug fix, and enhancement update webkitgtk4-jsc-devel-2.28.2-2.el7.x86_64.rpmLinux
(CESA-2020:4035) webkitgtk4 security, bug fix, and enhancement update webkitgtk4-2.28.2-2.el7.i686.rpmLinux
(CESA-2020:4035) webkitgtk4 security, bug fix, and enhancement update webkitgtk4-devel-2.28.2-2.el7.i686.rpmLinux
(CESA-2020:4035) webkitgtk4 security, bug fix, and enhancement update webkitgtk4-jsc-2.28.2-2.el7.i686.rpmLinux
(CESA-2020:4035) webkitgtk4 security, bug fix, and enhancement update webkitgtk4-jsc-devel-2.28.2-2.el7.i686.rpmLinux
(CESA-2020:4035) webkitgtk4 security, bug fix, and enhancement update webkitgtk4-2.28.2-2.el7.x86_64.rpmLinux
(CESA-2020:4035) webkitgtk4 security, bug fix, and enhancement update webkitgtk4-devel-2.28.2-2.el7.x86_64.rpmLinux
(CESA-2020:4035) webkitgtk4 security, bug fix, and enhancement update webkitgtk4-doc-2.28.2-2.el7.noarch.rpmLinux
(CESA-2020:4035) webkitgtk4 security, bug fix, and enhancement update webkitgtk4-jsc-2.28.2-2.el7.x86_64.rpmLinux
(CESA-2020:4035) webkitgtk4 security, bug fix, and enhancement update webkitgtk4-jsc-devel-2.28.2-2.el7.x86_64.rpmLinux
GNOME security, bug fix, and enhancement update (RLSA-2019:3553) pidgin-2.13.0-5.el8.x86_64.rpmLinux
GNOME security, bug fix, and enhancement update (RLSA-2019:3553) libpurple-2.13.0-5.el8.i686.rpmLinux
GNOME security, bug fix, and enhancement update (RLSA-2019:3553) libpurple-2.13.0-5.el8.x86_64.rpmLinux
GNOME security, bug fix, and enhancement update (RLSA-2019:3553) gdk-pixbuf2-2.36.12-5.el8.i686.rpmLinux
GNOME security, bug fix, and enhancement update (RLSA-2019:3553) gdk-pixbuf2-2.36.12-5.el8.x86_64.rpmLinux
GNOME security, bug fix, and enhancement update (RLSA-2019:3553) gnome-desktop3-3.32.2-1.el8.i686.rpmLinux
GNOME security, bug fix, and enhancement update (RLSA-2019:3553) gnome-desktop3-3.32.2-1.el8.x86_64.rpmLinux
GNOME security, bug fix, and enhancement update (RLSA-2019:3553) gdk-pixbuf2-devel-2.36.12-5.el8.i686.rpmLinux
GNOME security, bug fix, and enhancement update (RLSA-2019:3553) gdk-pixbuf2-devel-2.36.12-5.el8.x86_64.rpmLinux
GNOME security, bug fix, and enhancement update (RLSA-2019:3553) gdk-pixbuf2-modules-2.36.12-5.el8.i686.rpmLinux
GNOME security, bug fix, and enhancement update (RLSA-2019:3553) gdk-pixbuf2-modules-2.36.12-5.el8.x86_64.rpmLinux
GNOME security, bug fix, and enhancement update (RLSA-2019:3553) gnome-desktop3-devel-3.32.2-1.el8.i686.rpmLinux
GNOME security, bug fix, and enhancement update (RLSA-2019:3553) gnome-desktop3-devel-3.32.2-1.el8.x86_64.rpmLinux
Low: GNOME security, bug fix, and enhancement update pidgin-2.13.0-5.el8.x86_64.rpmLinux
Low: GNOME security, bug fix, and enhancement update libpurple-2.13.0-5.el8.i686.rpmLinux
Low: GNOME security, bug fix, and enhancement update libpurple-2.13.0-5.el8.x86_64.rpmLinux

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-311174Apple iTunes (12.10.1.4)
PATCH-311175Apple iTunes (X64) (12.10.1.4)
PATCH-311176iCloud (7.14.0.29)
PATCH-316162iCloud (7.21.0.23) (Deployment-Only)
PATCH-310919Apple iTunes (X64) (12.10.0.7)
PATCH-310917Apple iTunes (12.10.0.7)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234