NetSight
IP …
high8.8Public exploit code

CVE-2019-8672

Multiple memory corruption issues were addressed with improved memory handling.

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.4, macOS Mojave 10.14.6, tvOS 12.4, watchOS 5.3, Safari 12.1.2, iTunes for Windows 12.9.6, iCloud for Windows 7.13, iCloud for Windows 10.6. Processing maliciously crafted web content may lead to arbitrary code execution.

Affected products

VendorProductAffected versions
AppleIcloud
before 7.13
from 10.0 before 10.6
AppleItunes
before 12.9.6
AppleSafari
before 12.1.2
AppleIphone Os
before 12.4
AppleMac Os X
before 10.14.6
AppleTvos
before 12.4
AppleWatchos
before 5.3
RedhatEnterprise Linux Desktop
Version 7.0
RedhatEnterprise Linux Server
Version 7.0
RedhatEnterprise Linux Workstation
Version 7.0

Weakness classification

CWE-787

References