CVE-2020-9999

CVE Database · CVE-2020-9999

CVE-2020-9999

· HIGHModified

CVSS v3.1

7.8

EPSS

2.89%

Published

Dec 8, 2020

Modified

Nov 21, 2024

Public PoC / Exploit (1)

All weaponized →

TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iTunes for Windows 12.10.9. Processing a maliciously crafted text file may lead to arbitrary code execution.

CVSS Vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-787

Affected Products (7)

apple · icloud (up to 11.5.0)vulnerable

apple · itunes (up to 12.10.9)vulnerable

apple · ipados (up to 14.0)vulnerable

apple · iphone_os (up to 14.0)vulnerable

apple · mac_os_x (up to 11.0.1)vulnerable

apple · tvos (up to 14.0)vulnerable

apple · watchos (up to 7.0)vulnerable

References (14)

http://seclists.org/fulldisclosure/2020/Dec/32

Mailing ListThird Party Advisory

https://support.apple.com/en-us/HT211931

Vendor Advisory

https://support.apple.com/en-us/HT211952

Vendor Advisory

https://support.apple.com/kb/HT211843

Vendor Advisory

https://support.apple.com/kb/HT211844

Vendor Advisory

https://support.apple.com/kb/HT211850

Vendor Advisory

https://support.apple.com/kb/HT211935

Vendor Advisory

KEV Catalog EPSS Scores Vendors All CVEs