Sign-up

ID

VAR-201912-0121


CVE

CVE-2019-8807


TITLE

plural Apple Updates to product vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2019-011304

DESCRIPTION

A memory corruption issue was addressed with improved memory handling. This issue is fixed in macOS Catalina 10.15.1. An application may be able to execute arbitrary code with system privileges. Apple Has released an update for each product.The expected impact depends on each vulnerability, but can be affected as follows: * * information leak * * User impersonation * * Arbitrary code execution * * UI Spoofing * * Insufficient access restrictions * * Service operation interruption (DoS) * * Privilege escalation * * Memory corruption * * Authentication bypass. Apple macOS Catalina is a set of dedicated operating systems developed by Apple for Mac computers. Intel Graphics Driver is one of the integrated graphics drivers. A security vulnerability exists in the Intel Graphics Driver component of Apple macOS Catalina prior to 10.15.1

Trust: 1.71

sources: NVD: CVE-2019-8807 // JVNDB: JVNDB-2019-011304 // VULHUB: VHN-160242

AFFECTED PRODUCTS

vendor:applemodel:mac os xscope:ltversion:10.15.1

Trust: 1.0

vendor:applemodel:icloudscope:ltversion:for windows 11.0 earlier

Trust: 0.8

vendor:applemodel:icloudscope:ltversion:for windows 7.15 earlier

Trust: 0.8

vendor:applemodel:iosscope:ltversion:13.2 earlier

Trust: 0.8

vendor:applemodel:ipadosscope:ltversion:13.2 earlier

Trust: 0.8

vendor:applemodel:itunesscope:ltversion:12.10.2 for windows earlier

Trust: 0.8

vendor:applemodel:macos catalinascope:ltversion:10.15.1 earlier

Trust: 0.8

vendor:applemodel:macos high sierrascope:eqversion:10.13.6 (security update 2019-006 not applied )

Trust: 0.8

vendor:applemodel:macos mojavescope:eqversion:10.14.6 (security update 2019-001 not applied )

Trust: 0.8

vendor:applemodel:safariscope:ltversion:13.0.3 earlier

Trust: 0.8

vendor:applemodel:tvosscope:ltversion:13.2 earlier

Trust: 0.8

vendor:applemodel:watchosscope:ltversion:6.1 earlier

Trust: 0.8

vendor:applemodel:xcodescope:ltversion:11.2 earlier

Trust: 0.8

sources: JVNDB: JVNDB-2019-011304 // NVD: CVE-2019-8807

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2019-8807
value: HIGH

Trust: 1.0

CNNVD: CNNVD-201910-1748
value: HIGH

Trust: 0.6

VULHUB: VHN-160242
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2019-8807
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

VULHUB: VHN-160242
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2019-8807
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

sources: VULHUB: VHN-160242 // CNNVD: CNNVD-201910-1748 // NVD: CVE-2019-8807

PROBLEMTYPE DATA

problemtype:CWE-787

Trust: 1.0

problemtype:CWE-119

Trust: 0.1

sources: VULHUB: VHN-160242 // NVD: CVE-2019-8807

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-201910-1748

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201910-1748

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2019-011304

PATCH
title:About the security content of iCloud for Windows 11.0url:https://support.apple.com/en-us/HT210727
Trust: 0.8
title:About the security content of iCloud for Windows 7.15url:https://support.apple.com/en-us/HT210728
Trust: 0.8
title:About the security content of iOS 13.2 and iPadOS 13.2url:https://support.apple.com/en-us/HT210721
Trust: 0.8
title:About the security content of Xcode 11.2url:https://support.apple.com/en-us/HT210729
Trust: 0.8
title:About the security content of macOS Catalina 10.15.1, Security Update 2019-001, and Security Update 2019-006url:https://support.apple.com/en-us/HT210722
Trust: 0.8
title:About the security content of tvOS 13.2url:https://support.apple.com/en-us/HT210723
Trust: 0.8
title:About the security content of watchOS 6.1url:https://support.apple.com/en-us/HT210724
Trust: 0.8
title:About the security content of Safari 13.0.3url:https://support.apple.com/en-us/HT210725
Trust: 0.8
title:About the security content of iTunes 12.10.2 for Windowsurl:https://support.apple.com/en-us/HT210726
Trust: 0.8
title:Mac に搭載されている macOS を調べるurl:https://support.apple.com/ja-jp/HT201260
Trust: 0.8
title:Apple macOS Catalina Intel Graphics Driver Fix for component buffer error vulnerabilityurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=105597
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2019-011304 // 
            
            
            
            CNNVD: CNNVD-201910-1748

EXTERNAL IDS
db:NVDid:CVE-2019-8807
Trust: 2.5
db:JVNid:JVNVU96749516
Trust: 0.8
db:JVNDBid:JVNDB-2019-011304
Trust: 0.8
db:CNNVDid:CNNVD-201910-1748
Trust: 0.7
db:AUSCERTid:ESB-2019.4010
Trust: 0.6
db:CNVDid:CNVD-2020-03284
Trust: 0.1
db:VULHUBid:VHN-160242
Trust: 0.1
sources:
            
            
            VULHUB: VHN-160242 // 
            
            
            
            JVNDB: JVNDB-2019-011304 // 
            
            
            
            CNNVD: CNNVD-201910-1748 // 
            
            
            
            NVD: CVE-2019-8807

REFERENCES
url:https://support.apple.com/ht210722
Trust: 1.7
url:https://nvd.nist.gov/vuln/detail/cve-2019-8807
Trust: 1.4
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8788
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8803
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8815
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8766
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8735
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8789
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8804
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8816
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8775
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8793
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8805
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8710
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8819
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8782
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8794
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8807
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8743
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8820
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8783
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8795
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8811
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8747
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8821
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8784
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8797
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8812
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8750
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8822
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8785
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8798
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8813
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8764
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8823
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8786
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8802
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8814
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8765
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8787
Trust: 0.8
url:https://jvn.jp/vu/jvnvu96749516/
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8812
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8750
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8822
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8785
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8797
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8813
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8764
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8823
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8786
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8798
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8814
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8765
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8787
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8802
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8815
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8766
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8788
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8803
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8804
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8816
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8775
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8789
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8805
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8710
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8819
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8782
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8793
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8743
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8820
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8783
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8794
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8811
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8747
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8821
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8784
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8735
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8795
Trust: 0.8
url:https://support.apple.com/en-au/ht201222
Trust: 0.6
url:https://vigilance.fr/vulnerability/apple-macos-multiple-vulnerabilities-30747
Trust: 0.6
url:https://www.auscert.org.au/bulletins/esb-2019.4010/
Trust: 0.6
url:https://support.apple.com/en-us/ht210722
Trust: 0.6
sources:
            
            
            VULHUB: VHN-160242 // 
            
            
            
            JVNDB: JVNDB-2019-011304 // 
            
            
            
            CNNVD: CNNVD-201910-1748 // 
            
            
            
            NVD: CVE-2019-8807

SOURCES
db:VULHUBid:VHN-160242
db:JVNDBid:JVNDB-2019-011304
db:CNNVDid:CNNVD-201910-1748
db:NVDid:CVE-2019-8807

LAST UPDATE DATE
2024-08-14T12:38:49+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-160242date:2019-12-21T00:00:00
db:JVNDBid:JVNDB-2019-011304date:2020-01-07T00:00:00
db:CNNVDid:CNNVD-201910-1748date:2021-10-29T00:00:00
db:NVDid:CVE-2019-8807date:2021-07-21T11:39:23.747

SOURCES RELEASE DATE
db:VULHUBid:VHN-160242date:2019-12-18T00:00:00
db:JVNDBid:JVNDB-2019-011304date:2019-11-01T00:00:00
db:CNNVDid:CNNVD-201910-1748date:2019-10-30T00:00:00
db:NVDid:CVE-2019-8807date:2019-12-18T18:15:43.333