CVE-2021-30759 - 漏洞详情

CVE-2021-30759 (CNNVD-202107-1671)

HIGH

中文标题:

Apple macOS 缓冲区错误漏洞

英文标题:

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 14.7, macO...

CVSS分数: 7.8

发布时间: 2021-09-08 13:45:19

漏洞类型: 缓冲区错误

状态: PUBLISHED

数据质量分数: 0.30

数据版本: v3

漏洞描述

中文描述:

Apple macOS是美国苹果（Apple）公司的一套专为Mac计算机所开发的专用操作系统。 MacOS 存在安全漏洞，远程攻击者利用该漏洞可以创建一个专门制作的字体文件，诱骗受害者打开它，触发基于堆栈的缓冲区溢出并在目标系统上执行任意代码。以下产品及版本受到影响：macOS: 10.15 19A583, 10.15 19A602, 10.15 19A603, 10.15.1 19B88, 10.15.2 19C57, 10.15.3 19D76, 10.15.4 19E266, 10.15.4 19E287, 10.15.5 19F96, 10.15.5 19F101, 10.15.6 19G73, 10.15.6 19G2021, 10.15.7 19H2, 10.15.7 19H4, 10.15.7 19H15, 10.15.7 19H114, 10.15.7 19H512, 10.15.7 19H524, 10.15.7 19H1030, 10.15.7 19H1217。

英文描述:

A stack overflow was addressed with improved input validation. This issue is fixed in iOS 14.7, macOS Big Sur 11.5, watchOS 7.6, tvOS 14.7, Security Update 2021-005 Mojave, Security Update 2021-004 Catalina. Processing a maliciously crafted font file may lead to arbitrary code execution.

CWE类型:

CWE-787

受影响产品

厂商	产品	版本	版本范围	平台	CPE
Apple	Security Update - Catalina	-	< 2021	-	`cpe:2.3:a:apple:security_update_-_catalina::::::::`
Apple	iOS	-	< 14.7	-	`cpe:2.3:a:apple:ios::::::::`
Apple	macOS	-	< 11.5	-	`cpe:2.3:a:apple:macos::::::::`
apple	ipados	*	-	-	`cpe:2.3:o:apple:ipados::::::::`
apple	iphone_os	*	-	-	`cpe:2.3:o:apple:iphone_os::::::::`
apple	mac_os_x	10.14	-	-	`cpe:2.3:o:apple:mac_os_x:10.14:::::::*`
apple	mac_os_x	10.14.0	-	-	`cpe:2.3:o:apple:mac_os_x:10.14.0:::::::*`
apple	mac_os_x	10.14.1	-	-	`cpe:2.3:o:apple:mac_os_x:10.14.1:::::::*`
apple	mac_os_x	10.14.2	-	-	`cpe:2.3:o:apple:mac_os_x:10.14.2:::::::*`
apple	mac_os_x	10.14.3	-	-	`cpe:2.3:o:apple:mac_os_x:10.14.3:::::::*`
apple	mac_os_x	10.14.4	-	-	`cpe:2.3:o:apple:mac_os_x:10.14.4:::::::*`
apple	mac_os_x	10.14.5	-	-	`cpe:2.3:o:apple:mac_os_x:10.14.5:::::::*`
apple	mac_os_x	10.14.6	-	-	`cpe:2.3:o:apple:mac_os_x:10.14.6:-::::::`
apple	mac_os_x	10.15	-	-	`cpe:2.3:o:apple:mac_os_x:10.15:::::::*`
apple	mac_os_x	10.15.1	-	-	`cpe:2.3:o:apple:mac_os_x:10.15.1:::::::*`
apple	mac_os_x	10.15.2	-	-	`cpe:2.3:o:apple:mac_os_x:10.15.2:::::::*`
apple	mac_os_x	10.15.3	-	-	`cpe:2.3:o:apple:mac_os_x:10.15.3:::::::*`
apple	mac_os_x	10.15.4	-	-	`cpe:2.3:o:apple:mac_os_x:10.15.4:::::::*`
apple	mac_os_x	10.15.5	-	-	`cpe:2.3:o:apple:mac_os_x:10.15.5:::::::*`
apple	mac_os_x	10.15.6	-	-	`cpe:2.3:o:apple:mac_os_x:10.15.6:::::::*`
apple	mac_os_x	10.15.7	-	-	`cpe:2.3:o:apple:mac_os_x:10.15.7:-::::::`
apple	macos	*	-	-	`cpe:2.3:o:apple:macos::::::::`
apple	tvos	*	-	-	`cpe:2.3:o:apple:tvos::::::::`
apple	watchos	*	-	-	`cpe:2.3:o:apple:watchos::::::::`

解决方案

中文解决方案:

（暂无数据）

英文解决方案:

（暂无数据）