CVE-2021-1857 - 漏洞详情

CVE-2021-1857 (CNNVD-202104-1918)

MEDIUM

中文标题:

Apple iTunes 安全漏洞

英文标题:

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iT...

CVSS分数: 6.5

发布时间: 2021-09-08 14:44:51

漏洞类型: 其他

状态: PUBLISHED

数据质量分数: 0.30

数据版本: v3

漏洞描述

中文描述:

Apple iTunes是美国苹果（Apple）公司的一套媒体播放器应用程序，它主要用于对数字音乐和视频文件进行播放以及管理。 iTunes 12.11.3 之前版本存在安全漏洞，该漏洞源于在处理精心制作的web内容时CFNetwork组件内部的不正确初始化。

英文描述:

A memory initialization issue was addressed with improved memory handling. This issue is fixed in iTunes 12.11.3 for Windows, Security Update 2021-002 Catalina, Security Update 2021-003 Mojave, iCloud for Windows 12.3, macOS Big Sur 11.3, watchOS 7.4, tvOS 14.5, iOS 14.5 and iPadOS 14.5. Processing maliciously crafted web content may disclose sensitive user information.

CWE类型:

CWE-665

受影响产品

厂商	产品	版本	版本范围	平台	CPE
Apple	iOS and iPadOS	-	< 14.5	-	`cpe:2.3:a:apple:ios_and_ipados::::::::`
Apple	iTunes for Windows	-	< 12.11	-	`cpe:2.3:a:apple:itunes_for_windows::::::::`
Apple	iCloud for Windows	-	< 12.3	-	`cpe:2.3:a:apple:icloud_for_windows::::::::`
Apple	tvOS	-	< 14.5	-	`cpe:2.3:a:apple:tvos::::::::`
Apple	watchOS	-	< 7.4	-	`cpe:2.3:a:apple:watchos::::::::`
Apple	macOS	-	< 11.3	-	`cpe:2.3:a:apple:macos::::::::`
apple	icloud	*	-	-	`cpe:2.3:a:apple:icloud::::::windows::*`
apple	itunes	*	-	-	`cpe:2.3:a:apple:itunes::::::windows::*`
apple	ipados	*	-	-	`cpe:2.3:o:apple:ipados::::::::`
apple	iphone_os	*	-	-	`cpe:2.3:o:apple:iphone_os::::::::`
apple	mac_os_x	10.14	-	-	`cpe:2.3:o:apple:mac_os_x:10.14:::::::*`
apple	mac_os_x	10.14.0	-	-	`cpe:2.3:o:apple:mac_os_x:10.14.0:::::::*`
apple	mac_os_x	10.14.1	-	-	`cpe:2.3:o:apple:mac_os_x:10.14.1:::::::*`
apple	mac_os_x	10.14.2	-	-	`cpe:2.3:o:apple:mac_os_x:10.14.2:::::::*`
apple	mac_os_x	10.14.3	-	-	`cpe:2.3:o:apple:mac_os_x:10.14.3:::::::*`
apple	mac_os_x	10.14.4	-	-	`cpe:2.3:o:apple:mac_os_x:10.14.4:::::::*`
apple	mac_os_x	10.14.5	-	-	`cpe:2.3:o:apple:mac_os_x:10.14.5:::::::*`
apple	mac_os_x	10.14.6	-	-	`cpe:2.3:o:apple:mac_os_x:10.14.6:::::::*`
apple	mac_os_x	10.15	-	-	`cpe:2.3:o:apple:mac_os_x:10.15:::::::*`
apple	mac_os_x	10.15.1	-	-	`cpe:2.3:o:apple:mac_os_x:10.15.1:::::::*`
apple	mac_os_x	10.15.2	-	-	`cpe:2.3:o:apple:mac_os_x:10.15.2:::::::*`
apple	mac_os_x	10.15.3	-	-	`cpe:2.3:o:apple:mac_os_x:10.15.3:::::::*`
apple	mac_os_x	10.15.4	-	-	`cpe:2.3:o:apple:mac_os_x:10.15.4:::::::*`
apple	mac_os_x	10.15.5	-	-	`cpe:2.3:o:apple:mac_os_x:10.15.5:::::::*`
apple	mac_os_x	10.15.6	-	-	`cpe:2.3:o:apple:mac_os_x:10.15.6:::::::*`
apple	mac_os_x	10.15.7	-	-	`cpe:2.3:o:apple:mac_os_x:10.15.7:::::::*`
apple	macos	*	-	-	`cpe:2.3:o:apple:macos::::::::`
apple	tvos	*	-	-	`cpe:2.3:o:apple:tvos::::::::`
apple	watchos	*	-	-	`cpe:2.3:o:apple:watchos::::::::`

解决方案

中文解决方案:

（暂无数据）

英文解决方案:

（暂无数据）