CVE-2019-8503 — Improper Input Validation in Apple Icloud FOR Windows

CWE-20 — Improper Input ValidationCWE-94 — Code Injection16 documents8 sources
Severity
8.8HIGHNVD
EPSS
0.9%
top 24.99%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
8
Apple Icloud FOR WindowsApple IOSApple Itunes FOR Windows+5 more
Timeline
PublishedDec 18
Latest updateMay 24

Description

A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. A malicious website may be able to execute scripts in the context of another website.

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 2.8 | Impact: 5.9

Affected Packages10 packages

▶CVEListV5apple/icloud_for_windowsunspecified — iCloud for Windows 7.11
▶CVEListV5apple/itunes_for_windowsunspecified — iTunes 12.9.4 for Windows
▶CVEListV5apple/tvosunspecified — tvOS 12.2
▶NVDapple/tvos< 12.2
▶CVEListV5apple/safariunspecified — Safari 12.1

🔴Vulnerability Details

3
GHSA
GHSA-66q9-mrhp-9hrp: A logic issue was addressed with improved validation↗2022-05-24
▶
CVEList
CVE-2019-8503: A logic issue was addressed with improved validation↗2019-12-18
▶
OSV
CVE-2019-8503: A logic issue was addressed with improved validation↗2019-12-18
▶

📋Vendor Advisories

7
Red Hat
webkitgtk: logic issue leads to code execution↗2019-04-10
▶
Apple
CVE-2019-8503: tvOS 12.2↗2019-03-25
▶
Apple
CVE-2019-8503: iOS 12.2↗2019-03-25
▶
Apple
CVE-2019-8503: iCloud for Windows 7.11↗2019-03-25
▶
Apple
CVE-2019-8503: iTunes 12.9.4 for Windows↗2019-03-25
▶

💬Community

5
Bugzilla
CVE-2019-8503 webkitgtk: logic issue leads to code execution↗2019-06-11
▶
Bugzilla
CVE-2019-7285 CVE-2019-7292 CVE-2019-8503 CVE-2019-8506 CVE-2019-8515 CVE-2019-8518 CVE-2019-8523 CVE-2019-8524 CVE-2019-8535 CVE-2019-8536 CVE-2019-8544 CVE-2019-8558 CVE-2019-8559 CVE-2019-8563 webk↗2019-06-11
▶
Bugzilla
CVE-2019-7285 CVE-2019-7292 CVE-2019-8503 CVE-2019-8506 CVE-2019-8515 CVE-2019-8518 CVE-2019-8523 CVE-2019-8524 CVE-2019-8535 CVE-2019-8536 CVE-2019-8544 CVE-2019-8558 CVE-2019-8559 CVE-2019-8563 ming↗2019-06-11
▶
Bugzilla
CVE-2019-7285 CVE-2019-7292 CVE-2019-8503 CVE-2019-8506 CVE-2019-8515 CVE-2019-8518 CVE-2019-8523 CVE-2019-8524 CVE-2019-8535 CVE-2019-8536 CVE-2019-8544 CVE-2019-8558 CVE-2019-8559 CVE-2019-8563 ming↗2019-06-11
▶
Bugzilla
CVE-2019-6201 CVE-2019-7285 CVE-2019-7292 CVE-2019-8503 CVE-2019-8506 CVE-2019-8515 CVE-2019-8518 CVE-2019-8523 CVE-2019-8524 CVE-2019-8535 CVE-2019-8536 CVE-2019-11070 CVE-2019-8544 ... webkit2gtk3: ↗2019-06-06
▶
CVE-2019-8503 — Improper Input Validation in Apple | cvebase