Sign-up

ID

VAR-201912-0585


CVE

CVE-2019-8661


TITLE

plural Apple Updates to product vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2019-006634

DESCRIPTION

A use after free issue was addressed with improved memory management. This issue is fixed in macOS Mojave 10.14.6. A remote attacker may be able to cause arbitrary code execution. Apple Has released an update for each product.The expected impact depends on each vulnerability, but can be affected as follows: * Arbitrary code execution * Insufficient access restrictions * information leak * Service operation interruption (DoS) * Information falsification * Privilege escalation * Sandbox avoidance. Apple macOS is prone to multiple security vulnerabilities. Attackers can exploit these issues to execute arbitrary code, bypass security restrictions, obtain sensitive information or gain elevated privileges. Apple macOS Mojave is a set of dedicated operating systems developed by Apple for Mac computers. Carbon Core is a Macintosh operating system component based on C language. A resource management error vulnerability exists in the Carbon Core component of Apple macOS Mojave prior to 10.14.6. -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2019-8-13-1 Additional information for APPLE-SA-2019-7-22-2 macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra address the following: AppleGraphicsControl Available for: macOS Mojave 10.14.5 Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization. CVE-2019-8693: Arash Tohidi of Solita autofs Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6, macOS Mojave 10.14.5 Impact: Extracting a zip file containing a symbolic link to an endpoint in an NFS mount that is attacker controlled may bypass Gatekeeper Description: This was addressed with additional checks by Gatekeeper on files mounted through a network share. CVE-2019-8656: Filippo Cavallarin Bluetooth Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6, macOS Mojave 10.14.5 Impact: A remote attacker may be able to cause arbitrary code execution Description: A memory corruption issue was addressed with improved input validation. CVE-2018-19860 Bluetooth Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6, macOS Mojave 10.14.5 Impact: An attacker in a privileged network position may be able to intercept Bluetooth traffic (Key Negotiation of Bluetooth - KNOB) Description: An input validation issue existed in Bluetooth. CVE-2019-9506: Daniele Antonioli of SUTD, Singapore, Dr. Nils Ole Tippenhauer of CISPA, Germany, and Prof. Kasper Rasmussen of University of Oxford, England Entry added August 13, 2019 Carbon Core Available for: macOS Mojave 10.14.5 Impact: A remote attacker may be able to cause arbitrary code execution Description: A use after free issue was addressed with improved memory management. CVE-2019-8661: Natalie Silvanovich of Google Project Zero Core Data Available for: macOS Mojave 10.14.5 Impact: A remote attacker may be able to leak memory Description: An out-of-bounds read was addressed with improved input validation. CVE-2019-8646: Natalie Silvanovich of Google Project Zero Core Data Available for: macOS Mojave 10.14.5 Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution Description: A memory corruption issue was addressed with improved input validation. CVE-2019-8660: Samuel Groß and Natalie Silvanovich of Google Project Zero Disk Management Available for: macOS Mojave 10.14.5 Impact: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2019-8697: ccpwd working with Trend Micro's Zero Day Initiative FaceTime Available for: macOS Mojave 10.14.5 Impact: A remote attacker may be able to cause arbitrary code execution Description: A memory corruption issue was addressed with improved input validation. CVE-2019-8648: Tao Huang and Tielei Wang of Team Pangu Found in Apps Available for: macOS Mojave 10.14.5 Impact: A remote attacker may be able to leak memory Description: This issue was addressed with improved checks. CVE-2019-8663: Natalie Silvanovich of Google Project Zero Foundation Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6, macOS Mojave 10.14.5 Impact: A remote attacker may be able to cause unexpected application termination or arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation. CVE-2019-8641: Samuel Groß and Natalie Silvanovich of Google Project Zero Grapher Available for: macOS Mojave 10.14.5 Impact: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2019-8695: riusksk of VulWar Corp working with Trend Micro's Zero Day Initiative Graphics Drivers Available for: macOS High Sierra 10.13.6, macOS Mojave 10.14.5 Impact: An application may be able to read restricted memory Description: A validation issue was addressed with improved input sanitization. CVE-2019-8691: Aleksandr Tarasikov (@astarasikov), Arash Tohidi of Solita, Lilang Wu and Moony Li of Trend Micro's Mobile Security Research Team working with Trend Micro's Zero Day Initiative CVE-2019-8692: Lilang Wu and Moony Li of Trend Micro Mobile Security Research Team working with Trend Micro's Zero Day Initiative Heimdal Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6, macOS Mojave 10.14.5 Impact: An issue existed in Samba that may allow attackers to perform unauthorized actions by intercepting communications between services Description: This issue was addressed with improved checks to prevent unauthorized actions. CVE-2018-16860: Isaac Boukris and Andrew Bartlett of the Samba Team and Catalyst IOAcceleratorFamily Available for: macOS Mojave 10.14.5 Impact: An application may be able to execute arbitrary code with kernel privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2019-8694: Arash Tohidi of Solita libxslt Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6, macOS Mojave 10.14.5 Impact: A remote attacker may be able to view sensitive information Description: A stack overflow was addressed with improved input validation. CVE-2019-13118: found by OSS-Fuzz Quick Look Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6, macOS Mojave 10.14.5 Impact: An attacker may be able to trigger a use-after-free in an application deserializing an untrusted NSDictionary Description: This issue was addressed with improved checks. CVE-2019-8662: Natalie Silvanovich and Samuel Groß of Google Project Zero Security Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6 Impact: An application may be able to execute arbitrary code with system privileges Description: A memory corruption issue was addressed with improved memory handling. CVE-2019-8697: ccpwd working with Trend Micro's Zero Day Initiative Siri Available for: macOS Mojave 10.14.5 Impact: A remote attacker may be able to leak memory Description: An out-of-bounds read was addressed with improved input validation. CVE-2019-8646: Natalie Silvanovich of Google Project Zero Time Machine Available for: macOS Mojave 10.14.5 Impact: The encryption status of a Time Machine backup may be incorrect Description: An inconsistent user interface issue was addressed with improved state management. CVE-2019-8667: Roland Kletzing of cyber:con GmbH UIFoundation Available for: macOS Sierra 10.12.6, macOS High Sierra 10.13.6, macOS Mojave 10.14.5 Impact: Parsing a maliciously crafted office document may lead to an unexpected application termination or arbitrary code execution Description: An out-of-bounds read was addressed with improved input validation. CVE-2019-8657: riusksk of VulWar Corp working with Trend Micro's Zero Day Initiative Additional recognition Classroom We would like to acknowledge Jeff Johnson of underpassapp.com for their assistance. Game Center We would like to acknowledge Min (Spark) Zheng and Xiaolong Bai of Alibaba Inc. for their assistance. Installation note: macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierra may be obtained from the Mac App Store or Apple's Software Downloads web site: https://support.apple.com/downloads/ Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQJdBAEBCABHFiEEDNXJVNCJJEAVmJdZeC9tht7TK3EFAl1S688pHHByb2R1Y3Qt c2VjdXJpdHktbm9yZXBseUBsaXN0cy5hcHBsZS5jb20ACgkQeC9tht7TK3Hiog/+ PcWPEhxDpnU1ctoVPhyoqkV1tUs8z3hdNyX/tPtQZIQVFB7No1Md0GX8Zrv2libb LwrbU25ewe82XE9Es6ngxTdkRaREn8+hm9gxYPCMDXyKRlv904Q1b4zthYUt7/NO 7RG6ZRHEINOQORzrDsmgT/X6TukIy73HNob+4xZJTdJe9ZU3/zDCaqUgyUJSodou vsVFR3oqkwbVby4eT9+YbxJWMvVoFfB1+Qqo1w9kN7WXcYK3gb7sGtnNQlrE70kR pLRogcmwTQsi+sTm8bxQsuXXjdtTHeeCf0FRJg8NY5wZmdV9lNOghtmNxfTwIuir VeWusIgZWaK7IbgHW3PRYv3Sbrk40zcOraDsPv2rdgjOj4ReVyKHw5/f5Fyhcn+v WnIC4iNIBurz0HZU91QqD58Sqp+HtWl8xkM3ZW+Kd9LjnLty3fNw6Au5Aw8DTHzN 5F+lz7JRVV3+j7AYELog3WV6mdzMKW85gJRJtwXJ8hHSYZnvat06faFlPcDiKjBW rW7BehRykZpmZtaSZjL25IeOuXJHHdRfvabuTZ3nk47SSn7EJJ3xFBnvw6TgVFX+ TvmcUg5FinTSR81NkIY0ux6x1kuV/4vIUGZ4O0Houf/FoUhMQvig9ZkSw2B+Ynbd Xl3qBT4SVPWQyFAvjHwjCZA+GpNsnEKgZm8SlYVgqog= =tCwo -----END PGP SIGNATURE-----

Trust: 2.16

sources: NVD: CVE-2019-8661 // JVNDB: JVNDB-2019-006634 // BID: 109322 // VULHUB: VHN-160096 // PACKETSTORM: 153723 // PACKETSTORM: 154054

AFFECTED PRODUCTS

vendor:applemodel:mac os xscope:ltversion:10.14.6

Trust: 1.0

vendor:applemodel:icloudscope:ltversion:for windows 10.6 earlier

Trust: 0.8

vendor:applemodel:icloudscope:ltversion:for windows 7.13 earlier

Trust: 0.8

vendor:applemodel:iosscope:ltversion:12.4 earlier

Trust: 0.8

vendor:applemodel:itunesscope:ltversion:for windows 12.9.6 earlier

Trust: 0.8

vendor:applemodel:macos high sierrascope:eqversion:(security update 2019-004 not applied )

Trust: 0.8

vendor:applemodel:macos mojavescope:ltversion:10.14.6 earlier

Trust: 0.8

vendor:applemodel:macos sierrascope:eqversion:(security update 2019-004 not applied )

Trust: 0.8

vendor:applemodel:safariscope:ltversion:12.1.2 earlier

Trust: 0.8

vendor:applemodel:tvosscope:ltversion:12.4 earlier

Trust: 0.8

vendor:applemodel:watchosscope:ltversion:5.3 earlier

Trust: 0.8

vendor:applemodel:macosscope:eqversion:10.14.5

Trust: 0.3

vendor:applemodel:macosscope:eqversion:10.13.6

Trust: 0.3

vendor:applemodel:macosscope:eqversion:10.12.6

Trust: 0.3

vendor:applemodel:security update sierrascope:neversion:2019-0040

Trust: 0.3

vendor:applemodel:security update high sierrascope:neversion:2019-0040

Trust: 0.3

vendor:applemodel:macosscope:neversion:10.14.6

Trust: 0.3

sources: BID: 109322 // JVNDB: JVNDB-2019-006634 // NVD: CVE-2019-8661

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2019-8661
value: CRITICAL

Trust: 1.0

CNNVD: CNNVD-201907-1202
value: CRITICAL

Trust: 0.6

VULHUB: VHN-160096
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2019-8661
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

VULHUB: VHN-160096
severity: HIGH
baseScore: 7.5
vectorString: AV:N/AC:L/AU:N/C:P/I:P/A:P
accessVector: NETWORK
accessComplexity: LOW
authentication: NONE
confidentialityImpact: PARTIAL
integrityImpact: PARTIAL
availabilityImpact: PARTIAL
exploitabilityScore: 10.0
impactScore: 6.4
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2019-8661
baseSeverity: CRITICAL
baseScore: 9.8
vectorString: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
attackVector: NETWORK
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: NONE
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 3.9
impactScore: 5.9
version: 3.1

Trust: 1.0

sources: VULHUB: VHN-160096 // CNNVD: CNNVD-201907-1202 // NVD: CVE-2019-8661

PROBLEMTYPE DATA

problemtype:CWE-416

Trust: 1.1

sources: VULHUB: VHN-160096 // NVD: CVE-2019-8661

THREAT TYPE

remote

Trust: 0.6

sources: CNNVD: CNNVD-201907-1202

TYPE

resource management error

Trust: 0.6

sources: CNNVD: CNNVD-201907-1202

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2019-006634

PATCH
title:About the security content of iCloud for Windows 7.13url:https://support.apple.com/en-us/HT210357
Trust: 0.8
title:About the security content of iCloud for Windows 10.6url:https://support.apple.com/en-us/HT210358
Trust: 0.8
title:About the security content of iOS 12.4url:https://support.apple.com/en-us/HT210346
Trust: 0.8
title:About the security content of tvOS 12.4url:https://support.apple.com/en-us/HT210351
Trust: 0.8
title:About the security content of Safari 12.1.2url:https://support.apple.com/en-us/HT210355
Trust: 0.8
title:About the security content of macOS Mojave 10.14.6, Security Update 2019-004 High Sierra, Security Update 2019-004 Sierraurl:https://support.apple.com/en-us/HT210348
Trust: 0.8
title:About the security content of watchOS 5.3url:https://support.apple.com/en-us/HT210353
Trust: 0.8
title:About the security content of iTunes 12.9.6 for Windowsurl:https://support.apple.com/en-us/HT210356
Trust: 0.8
title:Apple macOS Mojave Carbon Core Fixes for component resource management error vulnerabilitiesurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=95369
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2019-006634 // 
            
            
            
            CNNVD: CNNVD-201907-1202

EXTERNAL IDS
db:NVDid:CVE-2019-8661
Trust: 3.0
db:BIDid:109322
Trust: 0.9
db:JVNid:JVNVU93368270
Trust: 0.8
db:JVNDBid:JVNDB-2019-006634
Trust: 0.8
db:PACKETSTORMid:153875
Trust: 0.7
db:CNNVDid:CNNVD-201907-1202
Trust: 0.7
db:PACKETSTORMid:153723
Trust: 0.7
db:AUSCERTid:ESB-2019.2743
Trust: 0.6
db:EXPLOIT-DBid:47207
Trust: 0.6
db:VULHUBid:VHN-160096
Trust: 0.1
db:PACKETSTORMid:154054
Trust: 0.1
sources:
            
            
            VULHUB: VHN-160096 // 
            
            
            
            BID: 109322 // 
            
            
            
            JVNDB: JVNDB-2019-006634 // 
            
            
            
            PACKETSTORM: 153723 // 
            
            
            
            PACKETSTORM: 154054 // 
            
            
            
            CNNVD: CNNVD-201907-1202 // 
            
            
            
            NVD: CVE-2019-8661

REFERENCES
url:https://support.apple.com/ht210348
Trust: 1.7
url:https://nvd.nist.gov/vuln/detail/cve-2019-8661
Trust: 1.6
url:https://nvd.nist.gov/vuln/detail/cve-2019-8663
Trust: 1.0
url:https://nvd.nist.gov/vuln/detail/cve-2019-8662
Trust: 1.0
url:https://nvd.nist.gov/vuln/detail/cve-2019-8692
Trust: 1.0
url:https://nvd.nist.gov/vuln/detail/cve-2019-8660
Trust: 1.0
url:https://nvd.nist.gov/vuln/detail/cve-2019-8691
Trust: 1.0
url:https://nvd.nist.gov/vuln/detail/cve-2019-8693
Trust: 1.0
url:https://nvd.nist.gov/vuln/detail/cve-2019-8648
Trust: 1.0
url:https://nvd.nist.gov/vuln/detail/cve-2019-8694
Trust: 1.0
url:https://nvd.nist.gov/vuln/detail/cve-2019-8667
Trust: 1.0
url:https://nvd.nist.gov/vuln/detail/cve-2019-8695
Trust: 1.0
url:https://nvd.nist.gov/vuln/detail/cve-2019-8657
Trust: 1.0
url:https://nvd.nist.gov/vuln/detail/cve-2019-8646
Trust: 1.0
url:https://nvd.nist.gov/vuln/detail/cve-2019-8697
Trust: 1.0
url:https://www.apple.com/
Trust: 0.9
url:https://lists.apple.com/archives/security-announce/2019/jul/msg00001.html
Trust: 0.9
url:https://nvd.nist.gov/vuln/detail/cve-2019-8670
Trust: 0.9
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8669
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8648
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8680
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8688
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8692
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8699
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8671
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8647
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8681
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8689
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8691
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8667
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8672
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8646
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8682
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8690
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8670
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8624
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8665
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8673
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8683
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8693
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8644
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8663
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8662
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8676
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8684
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8694
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8649
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8661
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8677
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8685
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8695
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8657
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8660
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8678
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8686
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8697
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8658
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8659
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8679
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8687
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8698
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8666
Trust: 0.8
url:https://jvn.jp/vu/jvnvu93368270/
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8679
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8687
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8698
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8666
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8680
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8688
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8699
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8669
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8681
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8689
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8671
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8682
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8690
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8624
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8672
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8673
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8683
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8659
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8644
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8676
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8684
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8649
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8677
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8685
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8647
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8678
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8665
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8686
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8658
Trust: 0.8
url:https://support.apple.com/en-au/ht210348
Trust: 0.6
url:https://packetstormsecurity.com/files/153723/apple-security-advisory-2019-7-22-2.html
Trust: 0.6
url:https://www.exploit-db.com/exploits/47207
Trust: 0.6
url:https://www.securityfocus.com/bid/109322
Trust: 0.6
url:https://vigilance.fr/vulnerability/apple-macos-multiple-vulnerabilities-29859
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2019.2743/
Trust: 0.6
url:https://packetstormsecurity.com/files/153875/imessage-url-deserializing-heap-overflow.html
Trust: 0.6
url:https://support.apple.com/en-us/ht210348
Trust: 0.6
url:https://support.apple.com/kb/ht201222
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-16860
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2019-13118
Trust: 0.2
url:https://support.apple.com/downloads/
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2019-8656
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2019-8641
Trust: 0.2
url:https://www.apple.com/support/security/pgp/
Trust: 0.2
url:https://nvd.nist.gov/vuln/detail/cve-2018-19860
Trust: 0.2
url:https://www.apple.com/support/security/pgp/>
Trust: 0.1
url:https://support.apple.com/downloads/>
Trust: 0.1
url:https://support.apple.com/kb/ht201222>
Trust: 0.1
url:http://underpassapp.com/>
Trust: 0.1
url:https://nvd.nist.gov/vuln/detail/cve-2019-9506
Trust: 0.1
sources:
            
            
            VULHUB: VHN-160096 // 
            
            
            
            BID: 109322 // 
            
            
            
            JVNDB: JVNDB-2019-006634 // 
            
            
            
            PACKETSTORM: 153723 // 
            
            
            
            PACKETSTORM: 154054 // 
            
            
            
            CNNVD: CNNVD-201907-1202 // 
            
            
            
            NVD: CVE-2019-8661

CREDITS
Roland Kletzing of cyber:con GmbH,Google Security Research, Aleksandr Tarasikov (@astarasikov), Filippo Cavallarin,GOOGLE SECURITY RESEARCH,Natalie Silvanovich of Google Project Zero,Arash Tohidi of Solita, Micro, ccpwd working with Trend M,  Arash Tohidi of Solita,Apple, Natalie Silvanovich of Google Project Zero, Lilang Wu and Moony Li of Trend Micro, Arash Tohidi of Solita
Trust: 0.6
sources:
            
            
            CNNVD: CNNVD-201907-1202

SOURCES
db:VULHUBid:VHN-160096
db:BIDid:109322
db:JVNDBid:JVNDB-2019-006634
db:PACKETSTORMid:153723
db:PACKETSTORMid:154054
db:CNNVDid:CNNVD-201907-1202
db:NVDid:CVE-2019-8661

LAST UPDATE DATE
2024-11-23T20:34:15.190000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-160096date:2019-12-19T00:00:00
db:BIDid:109322date:2019-07-22T00:00:00
db:JVNDBid:JVNDB-2019-006634date:2020-01-07T00:00:00
db:CNNVDid:CNNVD-201907-1202date:2021-10-29T00:00:00
db:NVDid:CVE-2019-8661date:2024-11-21T04:50:14.963

SOURCES RELEASE DATE
db:VULHUBid:VHN-160096date:2019-12-18T00:00:00
db:BIDid:109322date:2019-07-22T00:00:00
db:JVNDBid:JVNDB-2019-006634date:2019-07-24T00:00:00
db:PACKETSTORMid:153723date:2019-07-23T18:02:22
db:PACKETSTORMid:154054date:2019-08-14T18:32:22
db:CNNVDid:CNNVD-201907-1202date:2019-07-22T00:00:00
db:NVDid:CVE-2019-8661date:2019-12-18T18:15:31.707