high7.8
CVE-2020-9999
A memory corruption issue was addressed with improved state management.
Impact
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iTunes for Windows 12.10.9. Processing a maliciously crafted text file may lead to arbitrary code execution.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Icloud | before 11.5.0 |
| Apple | Itunes | before 12.10.9 |
| Apple | Ipados | before 14.0 |
| Apple | Iphone Os | before 14.0 |
| Apple | Mac Os X | before 11.0.1 |
| Apple | Tvos | before 14.0 |
| Apple | Watchos | before 7.0 |
Weakness classification
References
- NVD record
- CVE.org record
- http://seclists.org/fulldisclosure/2020/Dec/32
- https://support.apple.com/en-us/HT211931
- https://support.apple.com/en-us/HT211952
- https://support.apple.com/kb/HT211843
- https://support.apple.com/kb/HT211844
- https://support.apple.com/kb/HT211850
- https://support.apple.com/kb/HT211935
- http://seclists.org/fulldisclosure/2020/Dec/32
- https://support.apple.com/en-us/HT211931
- https://support.apple.com/en-us/HT211952
- https://support.apple.com/kb/HT211843
- https://support.apple.com/kb/HT211844
- https://support.apple.com/kb/HT211850
- https://support.apple.com/kb/HT211935