Sign-up

ID

VAR-201912-0494


CVE

CVE-2019-8555


TITLE

plural Apple Updates to product vulnerabilities

Trust: 0.8

sources: JVNDB: JVNDB-2019-001923

DESCRIPTION

A buffer overflow was addressed with improved size validation. This issue is fixed in macOS Mojave 10.14.4. A malicious application may be able to execute arbitrary code with kernel privileges. Apple Has released an update for each product.The expected impact depends on each vulnerability, but can be affected as follows: * Insufficient access restrictions * Cross-site scripting * Privilege escalation * Service operation interruption (DoS) * Sandbox avoidance * Information falsification * information leak * Arbitrary code execution * Arbitrary command execution * Memory corruption. Apple macOS Mojave is a set of dedicated operating systems developed by Apple for Mac computers. AppleGraphicsControl is one of the integrated graphics drivers. A buffer error vulnerability exists in the AppleGraphicsControl component in versions prior to Apple macOS Mojave 10.14.4

Trust: 1.71

sources: NVD: CVE-2019-8555 // JVNDB: JVNDB-2019-001923 // VULHUB: VHN-159990

AFFECTED PRODUCTS

vendor:applemodel:mac os xscope:ltversion:10.4.4

Trust: 1.0

vendor:applemodel:icloudscope:ltversion:for windows 7.11 earlier

Trust: 0.8

vendor:applemodel:iosscope:ltversion:12.2 earlier

Trust: 0.8

vendor:applemodel:itunesscope:ltversion:12.9.4 for windows earlier

Trust: 0.8

vendor:applemodel:macos high sierrascope:eqversion:(security update 2019-002 not applied )

Trust: 0.8

vendor:applemodel:macos mojavescope:ltversion:10.14.4 earlier

Trust: 0.8

vendor:applemodel:macos sierrascope:eqversion:(security update 2019-002 not applied )

Trust: 0.8

vendor:applemodel:safariscope:ltversion:12.1 earlier

Trust: 0.8

vendor:applemodel:tvosscope:ltversion:12.2 earlier

Trust: 0.8

vendor:applemodel:watchosscope:ltversion:5.2 earlier

Trust: 0.8

vendor:applemodel:xcodescope:ltversion:10.2 earlier

Trust: 0.8

sources: JVNDB: JVNDB-2019-001923 // NVD: CVE-2019-8555

CVSS

SEVERITY

CVSSV2

CVSSV3

nvd@nist.gov: CVE-2019-8555
value: HIGH

Trust: 1.0

CNNVD: CNNVD-201903-979
value: HIGH

Trust: 0.6

VULHUB: VHN-159990
value: HIGH

Trust: 0.1

nvd@nist.gov: CVE-2019-8555
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 1.0

VULHUB: VHN-159990
severity: HIGH
baseScore: 9.3
vectorString: AV:N/AC:M/AU:N/C:C/I:C/A:C
accessVector: NETWORK
accessComplexity: MEDIUM
authentication: NONE
confidentialityImpact: COMPLETE
integrityImpact: COMPLETE
availabilityImpact: COMPLETE
exploitabilityScore: 8.6
impactScore: 10.0
acInsufInfo: NONE
obtainAllPrivilege: NONE
obtainUserPrivilege: NONE
obtainOtherPrivilege: NONE
userInteractionRequired: NONE
version: 2.0

Trust: 0.1

nvd@nist.gov: CVE-2019-8555
baseSeverity: HIGH
baseScore: 7.8
vectorString: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
attackVector: LOCAL
attackComplexity: LOW
privilegesRequired: NONE
userInteraction: REQUIRED
scope: UNCHANGED
confidentialityImpact: HIGH
integrityImpact: HIGH
availabilityImpact: HIGH
exploitabilityScore: 1.8
impactScore: 5.9
version: 3.1

Trust: 1.0

sources: VULHUB: VHN-159990 // CNNVD: CNNVD-201903-979 // NVD: CVE-2019-8555

PROBLEMTYPE DATA

problemtype:CWE-119

Trust: 1.1

sources: VULHUB: VHN-159990 // NVD: CVE-2019-8555

THREAT TYPE

local

Trust: 0.6

sources: CNNVD: CNNVD-201903-979

TYPE

buffer error

Trust: 0.6

sources: CNNVD: CNNVD-201903-979

CONFIGURATIONS

sources:
            
            
            JVNDB: JVNDB-2019-001923

PATCH
title:About the security content of iCloud for Windows 7.11url:https://support.apple.com/en-us/HT209605
Trust: 0.8
title:About the security content of watchOS 5.2url:https://support.apple.com/en-us/HT209602
Trust: 0.8
title:About the security content of iOS 12.2url:https://support.apple.com/en-us/HT209599
Trust: 0.8
title:About the security content of Xcode 10.2url:https://support.apple.com/en-us/HT209606
Trust: 0.8
title:About the security content of tvOS 12.2url:https://support.apple.com/en-us/HT209601
Trust: 0.8
title:About the security content of macOS Mojave 10.14.4, Security Update 2019-002 High Sierra, Security Update 2019-002 Sierraurl:https://support.apple.com/en-us/HT209600
Trust: 0.8
title:About the security content of Safari 12.1url:https://support.apple.com/en-us/HT209603
Trust: 0.8
title:About the security content of iTunes 12.9.4 for Windowsurl:https://support.apple.com/en-us/HT209604
Trust: 0.8
title:Apple macOS Mojave AppleGraphicsControl Buffer error vulnerability fixurl:http://www.cnnvd.org.cn/web/xxk/bdxqById.tag?id=90423
Trust: 0.6
sources:
            
            
            JVNDB: JVNDB-2019-001923 // 
            
            
            
            CNNVD: CNNVD-201903-979

EXTERNAL IDS
db:NVDid:CVE-2019-8555
Trust: 2.5
db:JVNid:JVNVU93236010
Trust: 0.8
db:JVNDBid:JVNDB-2019-001923
Trust: 0.8
db:CNNVDid:CNNVD-201903-979
Trust: 0.7
db:AUSCERTid:ESB-2019.0990
Trust: 0.6
db:VULHUBid:VHN-159990
Trust: 0.1
sources:
            
            
            VULHUB: VHN-159990 // 
            
            
            
            JVNDB: JVNDB-2019-001923 // 
            
            
            
            CNNVD: CNNVD-201903-979 // 
            
            
            
            NVD: CVE-2019-8555

REFERENCES
url:https://support.apple.com/ht209600
Trust: 1.7
url:https://nvd.nist.gov/vuln/detail/cve-2019-8555
Trust: 1.4
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-6232
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8520
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8561
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-6236
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8522
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8562
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-6239
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8526
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8563
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8556
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8507
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8533
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8565
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8555
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8508
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8537
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8567
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8553
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8510
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8554
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8513
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8558
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-6207
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8519
Trust: 0.8
url:https://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2019-8559
Trust: 0.8
url:https://jvn.jp/vu/jvnvu93236010/
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8553
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8513
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8558
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-6207
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8519
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8559
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-6232
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8520
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8561
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-6236
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8522
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8562
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8563
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-6239
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8526
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8565
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8507
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8533
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8567
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8556
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8508
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8537
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8510
Trust: 0.8
url:https://nvd.nist.gov/vuln/detail/cve-2019-8554
Trust: 0.8
url:https://support.apple.com/en-au/ht209600
Trust: 0.6
url:https://vigilance.fr/vulnerability/apple-macos-multiple-vulnerabilities-28853
Trust: 0.6
url:https://www.auscert.org.au/bulletins/77806
Trust: 0.6
url:https://support.apple.com/en-us/ht209600
Trust: 0.6
sources:
            
            
            VULHUB: VHN-159990 // 
            
            
            
            JVNDB: JVNDB-2019-001923 // 
            
            
            
            CNNVD: CNNVD-201903-979 // 
            
            
            
            NVD: CVE-2019-8555

SOURCES
db:VULHUBid:VHN-159990
db:JVNDBid:JVNDB-2019-001923
db:CNNVDid:CNNVD-201903-979
db:NVDid:CVE-2019-8555

LAST UPDATE DATE
2024-08-14T12:34:39.610000+00:00

SOURCES UPDATE DATE
db:VULHUBid:VHN-159990date:2019-12-19T00:00:00
db:JVNDBid:JVNDB-2019-001923date:2020-01-06T00:00:00
db:CNNVDid:CNNVD-201903-979date:2021-10-29T00:00:00
db:NVDid:CVE-2019-8555date:2019-12-19T20:43:30.877

SOURCES RELEASE DATE
db:VULHUBid:VHN-159990date:2019-12-18T00:00:00
db:JVNDBid:JVNDB-2019-001923date:2019-03-29T00:00:00
db:CNNVDid:CNNVD-201903-979date:2019-03-26T00:00:00
db:NVDid:CVE-2019-8555date:2019-12-18T18:15:25.863