漏洞信息详情

多款CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple产品WebKit组件输入验证错误漏洞

• CNNVD编号：CNNVD-201903-1014
• 危害等级： 中危
  
• CVE编号： CVE-2019-7292
• 漏洞类型： 输入验证错误
• 发布时间： 2019-03-26
• 威胁类型： 远程
• 更新时间： 2021-11-03
• 厂        商：
• 漏洞来源： CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple,WebKitGTK+ T...

漏洞简介

CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple Safari等都是美国苹果（CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple）公司的产品。CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple Safari是一款Web浏览器，是Mac OS X和iOS操作系统附带的默认浏览器。CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple iOS是一套为移动设备所开发的操作系统。CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple tvOS是一套智能电视操作系统。WebKit是其中的一个Web浏览器引擎组件。

多款CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple产品中的WebKit组件存在安全漏洞。攻击者可借助恶意制作的Web内容利用该漏洞泄露进程内存。以下产品和版本受到影响：CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple iOS 12.2之前版本；tvOS 12.2之前版本；Safari 12.1之前版本；基于Windows平台的iTunes 12.9.4之前版本；基于Windows平台的iCloud 7.11之前版本。

漏洞公告

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/zh-cn/HT209599

https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/zh-cn/HT209601

https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/zh-cn/HT209603

https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/zh-cn/HT209604

https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/zh-cn/HT209605

参考网址

来源:support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com

链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/HT209599

来源:support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com

链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/HT209601

来源:support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com

链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/HT209602

来源:MISC

链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/HT209604

来源:support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com

链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/HT209603

来源:MISC

链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/HT209605

来源:support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com

链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/en-au/HT209599

来源:support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com

链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/en-au/HT209602

来源:support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com

链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/en-us/HT209603

来源:support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com

链接:https://support.CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple.com/en-us/HT209602

来源:nvd.nist.gov

链接:https://nvd.nist.gov/vuln/detail/CVE-2019-7292

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/152228/CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple-Security-Advisory-2019-3-25-6.HTML

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple-iOS-multiple-vulnerabilities-28854

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/77810

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/77986

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/152277/CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple-Security-Advisory-2019-3-27-1.HTML

来源:packetstormsecurity.com

链接:https://packetstormsecurity.com/files/152485/WebKitGTK-WPE-WebKit-URI-Spoofing-Code-Execution.HTML

受影响实体

暂无

补丁

• 多款CMS.zone.ci/e/tags/htag.php?tag=Apple target=_blank class=infotextkey>Apple产品WebKit 安全漏洞的修复措施