Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 12.3, macOS Mojave 10.14.5, tvOS 12.3, Safari 12.1.1, iTunes for Windows 12.9.5, iCloud for Windows 7.12. Processing maliciously crafted web content may lead to arbitrary code execution.

The version of Apple iTunes for Windows installed on the remote Windows host is prior to 12.9.5. It is, therefore, affected by multiple vulnerabilities as referenced in the HT210124 advisory.

  - An application may be able to gain elevated privileges     (CVE-2019-8577)

  - A maliciously crafted SQL query may lead to arbitrary     code execution (CVE-2019-8600)

  - A malicious application may be able to read restricted     memory (CVE-2019-8598)

  - A malicious application may be able to elevate     privileges (CVE-2019-8602)

  - Processing maliciously crafted web content may result in     the disclosure of process memory (CVE-2019-8607)

  - Processing maliciously crafted web content may lead to     arbitrary code execution (CVE-2019-6237, CVE-2019-8571,     CVE-2019-8583, CVE-2019-8584, CVE-2019-8586,     CVE-2019-8587, CVE-2019-8594, CVE-2019-8595,     CVE-2019-8596, CVE-2019-8597, CVE-2019-8601,     CVE-2019-8608, CVE-2019-8609, CVE-2019-8610,     CVE-2019-8611, CVE-2019-8615, CVE-2019-8619,     CVE-2019-8622, CVE-2019-8623, CVE-2019-8628)

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

According to its version, the iCloud application installed on the remote Windows host is prior to 7.12. It is, therefore, affected by multiple vulnerabilities:

  - An arbitrary code execution vulnerability exists in SQLite &     WebKit due to maliciously crafted content. An unauthenticated,     remote attacker can exploit this to execute arbitrary code.     (CVE-2019-8600, CVE-2019-6237, CVE-2019-8571, CVE-2019-8583,      CVE-2019-8584, CVE-2019-8586, CVE-2019-8587, CVE-2019-8594,      CVE-2019-8595, CVE-2019-8596, CVE-2019-8597, CVE-2019-8601,      CVE-2019-8608, CVE-2019-8609, CVE-2019-8610, CVE-2019-8611,      CVE-2019-8615, CVE-2019-8619, CVE-2019-8622, CVE-2019-8623,      CVE-2019-8628)

  - An privilege escalation vulnerability exists in SQLite due to     an input validation and memory corruption issue. An     unauthenticated, remote attacker can exploit this to execute     arbitrary code. (CVE-2019-8577, CVE-2019-8602)

  - An arbitrary memory read vulnerability exists in SQLite due to     improper input validation. An unauthenticated, remote attacker     can exploit this to read restricted memory. (CVE-2019-8598)

The version of Apple Safari installed on the remote macOS or Mac OS X host is prior to 12.1.1 It is, therefore, affected by multiple vulnerabilities.

  - Multiple out-of-bound errors exist in WebKit, due to improper memory handling. An unauthenticated, remote attacker     can exploit this, via specially crated web content to execute arbitrary commands. (CVE-2019-6237, CVE-2019-8571,     CVE-2019-8583, CVE-2019-8584, CVE-2019-8586, CVE-2019-8587, CVE-2019-8594, CVE-2019-8595, CVE-2019-8596,     CVE-2019-8597, CVE-2019-8601, CVE-2019-8608, CVE-2019-8609, CVE-2019-8610, CVE-2019-8611, CVE-2019-8615,     CVE-2019-8619, CVE-2019-8622, CVE-2019-8623, CVE-2019-8628)

  - An out-of-bound read error exists in WebKit due to improper memory handling. An unauthenticated, remote attacker     can exploit this, via specially crafted web content to disclose memory contents. (CVE-2019-8607)

The version of Apple tvOS installed on the remote host is greater or equal to 12.0.0 and prior to 12.3. It is, therefore, affected by the following vulnerabilities :

 - An application may be able to execute arbitrary code with system privileges. (CVE-2019-8593)

 - Processing a maliciously crafted movie file may lead to arbitrary code execution. (CVE-2019-8585)

 - A malicious application may be able to read restricted memory. (CVE-2019-8560)

 - A malicious application may be able to execute arbitrary code with system privileges. (CVE-2019-8605)

 - A local user may be able to cause unexpected system termination or read kernel memory. (CVE-2019-8576)

 - An application may be able to cause unexpected system termination or write kernel memory. (CVE-2019-8591)

 - A local user may be able to modify protected parts of the file system. (CVE-2019-8568)

 - A malicious application may be able to gain root privileges. (CVE-2019-8637)

 - An application may be able to gain elevated privileges. (CVE-2019-8577)

 - A maliciously crafted SQL query may lead to arbitrary code execution. (CVE-2019-8600)

 - A malicious application may be able to read restricted memory. (CVE-2019-8598)

 - A malicious application may be able to elevate privileges. (CVE-2019-8602)

 - An application may be able to execute arbitrary code with system privileges. (CVE-2019-8574)

 - Processing maliciously crafted web content may result in the disclosure of process memory. (CVE-2019-8607)

 - Processing maliciously crafted web content may lead to arbitrary code execution. (CVE-2019-6237, CVE-2019-8571, CVE-2019-8583, CVE-2019-8584, CVE-2019-8586, CVE-2019-8587, CVE-2019-8594, CVE-2019-8595, CVE-2019-8596, CVE-2019-8597, CVE-2019-8601, CVE-2019-8608, CVE-2019-8609, CVE-2019-8610, CVE-2019-8611, CVE-2019-8615, CVE-2019-8619, CVE-2019-8622, CVE-2019-8623, CVE-2019-8628)

 - A device may be passively tracked by its WiFi MAC address. (CVE-2019-8620)

The version of Apple iOS running on the mobile device is prior to 12.3. It is, therefore, affected by multiple vulnerabilities as described in the HT210118 security advisory.

 - Multiple elevation of privilege vulnerabilities exist due to improper memory handling. An application can exploit this to gain elevated privileges. (CVE-2019-8593, CVE-2019-8605, CVE-2019-8574)

 -Multiple unspecified command execution vulnerabilities exist that allow an attacker to execute arbitrary commands, sometimes with kernel privileges. (CVE-2019-8585, CVE-2019-8613,CVE-2019-8600, CVE-2019-6237, CVE-2019-8571, CVE-2019-8583, CVE-2019-8584, CVE-2019-8586, CVE-2019-8587, CVE-2019-8594, CVE-2019-8595, CVE-2019-8596, CVE-2019-8597, CVE-2019-8601, CVE-2019-8608, CVE-2019-8609, CVE-2019-8610, CVE-2019-8611, CVE-2019-8615, CVE-2019-8619, CVE-2019-8622, CVE-2019-8623, CVE-2019-8628)

 -An unspecified denial of service (DoS) vulnerability exists in the Kernel that allows an an attacker in a privileged position to perform a denial of service attack. (CVE-2019-8626)

The remote host is running a version of macOS / Mac OS X that is 10.x prior to 10.14.5. It is, therefore, affected by the following vulnerabilities :

 - A validation issue was addressed with improved input sanitization.(CVE-2019-8603,CVE-2019-8560)

 - A memory corruption issue was addressed with improved memory handling.(CVE-2019-8635,CVE-2019-8616,CVE-2018-4456,CVE-2019-8604,CVE-2019-8574,CVE-2019-8569)

 - A logic issue was addressed with improved restrictions.(CVE-2019-8590)

 - A memory corruption issue was addressed with improved error handling.(CVE-2019-8592)

 - An out-of-bounds read was addressed with improved input validation.(CVE-2019-8585,CVE-2019-8607)

 - This issue was addressed with improved checks.(CVE-2019-8589)

 - An out-of-bounds read was addressed with improved bounds checking.(CVE-2019-8560,CVE-2019-8576)

 - An authentication issue was addressed with improved state management.(CVE-2019-8634)

 - A memory initialization issue was addressed with improved memory handling.(CVE-2019-8629)

 - A validation issue existed in the handling of symlinks. This issue was addressed with improved validation of symlinks.(CVE-2019-8606,CVE-2019-8568)

 - A use after free issue was addressed with improved memory management.(CVE-2019-8605)

 - A type confusion issue was addressed with improved memory handling.(CVE-2019-8591)

 - An input validation issue was addressed with improved memory handling.(CVE-2019-8577)

 - A memory corruption issue was addressed with improved input validation.(CVE-2019-8600)

 - An input validation issue was addressed with improved input validation.(CVE-2019-8598)

 - A memory corruption issue was addressed by removing the vulnerable code.(CVE-2019-8602)

 - Multiple memory corruption issues were addressed with improved memory handling.(CVE-2019-6237,CVE-2019-8571,CVE-2019-8583,CVE-2019-8584,CVE-2019-8586,CVE-2019-8587,CVE-2019-8594,CVE-2019-8595,CVE-2019-8596,CVE-2019-8597,CVE-2019-8601,CVE-2019-8608,CVE-2019-8609,CVE-2019-8610,CVE-2019-8611,CVE-2019-8615,CVE-2019-8619,CVE-2019-8622,CVE-2019-8623,CVE-2019-8628)

The version of Apple Safari installed on the remote host is greater or equal to 12.0.0 and prior to 12.1.1. It is, therefore, affected by the following vulnerabilities :

 - An out-of-bounds read was addressed with improved input validation.(CVE-2019-8607)

 - Multiple memory corruption issues were addressed with improved memory handling.(CVE-2019-6237, CVE-2019-8571, CVE-2019-8583, CVE-2019-8584, CVE-2019-8586, CVE-2019-8587, CVE-2019-8594, CVE-2019-8595, CVE-2019-8596, CVE-2019-8597, CVE-2019-8601, CVE-2019-8608, CVE-2019-8609, CVE-2019-8610, CVE-2019-8611, CVE-2019-8615, CVE-2019-8619, CVE-2019-8622, CVE-2019-8623, CVE-2019-8628)

The remote host is running Mac OS X 10.12.6 or Mac OS X 10.13.6 and is missing a security update. It is, therefore, affected by multiple vulnerabilities :

  - An application may be able to read restricted memory (CVE-2019-8603, CVE-2019-8560)

  - An application may be able to execute arbitrary code with system privileges (CVE-2019-8635, CVE-2019-8616,     CVE-2019-8629, CVE-2018-4456, CVE-2019-8604, CVE-2019-8574, CVE-2019-8569)

  - An application may be able to execute arbitrary code with kernel privileges (CVE-2019-8590)

  - Processing a maliciously crafted audio file may lead to arbitrary code execution (CVE-2019-8592)

  - Processing a maliciously crafted movie file may lead to arbitrary code execution (CVE-2019-8585)

  - A malicious application may bypass Gatekeeper checks (CVE-2019-8589)

  - A malicious application may be able to read restricted memory (CVE-2019-8560, CVE-2019-8598)

  - A user may be unexpectedly logged in to another users account (CVE-2019-8634)

  - A local user may be able to load unsigned kernel extensions (CVE-2019-8606)

  - A malicious application may be able to execute arbitrary code with system privileges (CVE-2019-8605)

  - A local user may be able to cause unexpected system termination or read kernel memory (CVE-2019-8576)

  - An application may be able to cause unexpected system termination or write kernel memory (CVE-2019-8591)

  - An application may be able to gain elevated privileges (CVE-2019-8577)

  - A maliciously crafted SQL query may lead to arbitrary code execution (CVE-2019-8600)

  - A malicious application may be able to elevate privileges (CVE-2019-8602)

  - A local user may be able to modify protected parts of the file system (CVE-2019-8568)

  - Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2019-6237, CVE-2019-8571,     CVE-2019-8583, CVE-2019-8584, CVE-2019-8586, CVE-2019-8587, CVE-2019-8594, CVE-2019-8595, CVE-2019-8596,     CVE-2019-8597, CVE-2019-8601,CVE-2019-8608, CVE-2019-8609, CVE-2019-8610, CVE-2019-8611, CVE-2019-8615,     CVE-2019-8619, CVE-2019-8622, CVE-2019-8623, CVE-2019-8628)

  - Processing maliciously crafted web content may result in the disclosure of process memory (CVE-2019-8607)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

The remote host is running a version of macOS / Mac OS X that is 10.14.x prior to 10.14.5. It is, therefore, affected by multiple vulnerabilities :

  - An application may be able to read restricted memory (CVE-2019-8603, CVE-2019-8560)

  - An application may be able to execute arbitrary code with system privileges (CVE-2019-8635, CVE-2019-8616,   CVE-2019-8629, CVE-2018-4456, CVE-2019-8604,CVE-2019-8574, CVE-2019-8569)

  - An application may be able to execute arbitrary code with kernel privileges (CVE-2019-8590)

  - Processing a maliciously crafted audio file may lead to arbitrary code execution (CVE-2019-8592)

  - Processing a maliciously crafted movie file may lead to arbitrary code execution (CVE-2019-8585)

  - A malicious application may bypass Gatekeeper checks (CVE-2019-8589)

  - A malicious application may be able to read restricted memory (CVE-2019-8560, CVE-2019-8598)

  - A user may be unexpectedly logged in to another users account (CVE-2019-8634)

  - A local user may be able to load unsigned kernel extensions (CVE-2019-8606)

  - A malicious application may be able to execute arbitrary code with system privileges (CVE-2019-8605)

  - A local user may be able to cause unexpected system termination or read kernel memory (CVE-2019-8576)

  - An application may be able to cause unexpected system termination or write kernel memory (CVE-2019-8591)

  - An application may be able to gain elevated privileges (CVE-2019-8577)

  - A maliciously crafted SQL query may lead to arbitrary code execution (CVE-2019-8600)

  - A malicious application may be able to elevate privileges (CVE-2019-8602)

  - A local user may be able to modify protected parts of the file system (CVE-2019-8568)

  - Processing maliciously crafted web content may lead to arbitrary code execution (CVE-2019-6237, CVE-2019-8571,     CVE-2019-8583, CVE-2019-8584, CVE-2019-8586, CVE-2019-8587, CVE-2019-8594, CVE-2019-8595, CVE-2019-8596,     CVE-2019-8597, CVE-2019-8601, CVE-2019-8608, CVE-2019-8609, CVE-2019-8610, CVE-2019-8611, CVE-2019-8615,     CVE-2019-8619, CVE-2019-8622, CVE-2019-8623, CVE-2019-8628)

  - Processing maliciously crafted web content may result in the disclosure of process memory (CVE-2019-8607)

Note that Nessus has not tested for this issue but has instead relied only on the operating system's self-reported version number.

According to its banner, the version of Apple TV on the remote device is prior to 12.3. It is therefore affected by multiple vulnerabilities as described in the HT210120 security advisory:

  - Multiple unspecified command execution vulnerabilities exist that     allow an attacker to execute arbitrary commands, sometimes with     kernel privileges.(CVE-2019-8593, CVE-2019-8585, CVE-2019-8605,     CVE-2019-8600, CVE-2019-8574)     
  - Multiple elevation of privilege vulnerabilities exist due to     improper memory handling. An application can exploit this to gain     elevated privileges. (CVE-2019-6237     CVE-2019-8571, CVE-2019-8583, CVE-2019-8584, CVE-2019-8586,     CVE-2019-8587, CVE-2019-8594, CVE-2019-8595, CVE-2019-8596,     CVE-2019-8597, CVE-2019-8601, CVE-2019-8608)     
  - An un disclosed elevation of privilege vulnerability exist due to   improper memory handling. An application can exploit this to gain   elevated privileges. (CVE-2019-8602)

The version of Apple iOS running on the mobile device is prior to 12.3. It is, therefore, affected by multiple vulnerabilities as described in the HT210118 security Advisory.

  - Multiple elevation of privilege vulnerabilities exist due to     improper memory handling. An application can exploit this to gain     elevated privileges. (CVE-2019-8593, CVE-2019-8605, CVE-2019-8574)

  - Multiple unspecified command execution vulnerabilities exist that     allow an attacker to execute arbitrary commands, sometimes with     kernel privileges. (CVE-2019-8585, CVE-2019-8613,CVE-2019-8600,     CVE-2019-6237, CVE-2019-8571, CVE-2019-8583, CVE-2019-8584,     CVE-2019-8586, CVE-2019-8587, CVE-2019-8594, CVE-2019-8595,     CVE-2019-8596, CVE-2019-8597, CVE-2019-8601, CVE-2019-8608,     CVE-2019-8609, CVE-2019-8610, CVE-2019-8611, CVE-2019-8615,     CVE-2019-8619, CVE-2019-8622, CVE-2019-8623, CVE-2019-8628)

  - An unspecified denial of service (DoS) vulnerability exists in     the Kernel that allows an an attacker in a privileged position to     perform a denial of service attack. (CVE-2019-8626)

ID	Name	Product	Family	Severity
126476	Apple iTunes for Windows < 12.9.5 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	critical
126475	Apple iTunes for Windows < 12.9.5 Multiple Vulnerabilities (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	critical
125878	Apple iCloud < 7.12 Multiple Vulnerabilities	Nessus	Windows	critical
125548	macOS : Apple Safari < 12.1.1 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	high
700719	Apple TV 12.0.0 and < 12.3 Multiple Vulnerabilities	Nessus Network Monitor	Internet Services	critical
700713	Apple iOS < 12.3 Multiple Vulnerabilities	Nessus Network Monitor	Mobile Devices	high
700667	macOS 10.x < 10.14.5 Multiple Vulnerabilities (APPLE-SA-2019-05-09)	Nessus Network Monitor	Operating System Detection	high
700666	Apple Safari 12.x < 12.1.1 Multiple Vulnerabilities (APPLE-SA-2019-05-09)	Nessus Network Monitor	Web Clients	medium
125151	macOS and Mac OS X Multiple Vulnerabilities (Security Update 2019-003)	Nessus	MacOS X Local Security Checks	critical
125150	macOS 10.14.x < 10.14.5 Multiple Vulnerabilities	Nessus	MacOS X Local Security Checks	critical
125148	Apple TV < 12.3 Multiple Vulnerabilities	Nessus	Misc.	critical
125090	Apple iOS < 12.3 Multiple Vulnerabilities	Nessus	Mobile Devices	critical

Detections

Analytics

CVE-2019-8628

high

Tenable Plugins

critical

critical

critical

high

critical

high

high

medium

critical

critical

critical

critical