CVE-2019-8801

published 2019-12-18

CVE-2019-8801: A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes…

high 7.8 CVSS 3.1

AV L AC L PR N UI R S U C H I H A H

A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes for Windows 12.10.2. Running the iTunes installer in an untrusted directory may result in arbitrary code execution.

Affected

6 ranges

Vendor	Product	Version range	Fixed in
apple	itunes	< 12.10.2	12.10.2
apple	itunes_12.10.2_for_windows	—	—
apple	itunes_for_windows	>= unspecified < iTunes for Windows 12.10.2	iTunes for Windows 12.10.2
apple	mac_os_x	< 10.15.1	10.15.1
apple	macos	>= unspecified < macOS Catalina 10.15.1	macOS Catalina 10.15.1
apple	macos_catalina_10.15.1_security_update_2019-001_and_security_update_2019-006	—	—

CWE-426