2019-02-18 09:04:38 -05:00
{
2019-12-18 18:01:00 +00:00
"data_type" : "CVE" ,
"data_format" : "MITRE" ,
"data_version" : "4.0" ,
2019-03-18 01:26:52 +00:00
"CVE_data_meta" : {
"ID" : "CVE-2019-8503" ,
2019-12-18 18:01:00 +00:00
"ASSIGNER" : "product-security@apple.com" ,
"STATE" : "PUBLIC"
} ,
"affects" : {
"vendor" : {
"vendor_data" : [
{
"vendor_name" : "Apple" ,
"product" : {
"product_data" : [
{
"product_name" : "iOS" ,
"version" : {
"version_data" : [
{
"version_affected" : "<" ,
"version_value" : "iOS 12.2"
}
]
}
} ,
{
"product_name" : "tvOS" ,
"version" : {
"version_data" : [
{
"version_affected" : "<" ,
"version_value" : "tvOS 12.2"
}
]
}
} ,
{
"product_name" : "Safari" ,
"version" : {
"version_data" : [
{
"version_affected" : "<" ,
"version_value" : "Safari 12.1"
}
]
}
} ,
{
"product_name" : "iTunes for Windows" ,
"version" : {
"version_data" : [
{
"version_affected" : "<" ,
"version_value" : "iTunes 12.9.4 for Windows"
}
]
}
} ,
{
"product_name" : "iCloud for Windows" ,
"version" : {
"version_data" : [
{
"version_affected" : "<" ,
"version_value" : "iCloud for Windows 7.11"
}
]
}
}
]
}
}
]
}
} ,
"problemtype" : {
"problemtype_data" : [
{
"description" : [
{
"lang" : "eng" ,
"value" : "A malicious website may be able to execute scripts in the context of another website"
}
]
}
]
} ,
"references" : {
"reference_data" : [
{
"url" : "https://support.apple.com/HT209599" ,
"refsource" : "MISC" ,
"name" : "https://support.apple.com/HT209599"
} ,
{
"url" : "https://support.apple.com/HT209601" ,
"refsource" : "MISC" ,
"name" : "https://support.apple.com/HT209601"
} ,
{
"url" : "https://support.apple.com/HT209603" ,
"refsource" : "MISC" ,
"name" : "https://support.apple.com/HT209603"
} ,
{
"url" : "https://support.apple.com/HT209604" ,
"refsource" : "MISC" ,
"name" : "https://support.apple.com/HT209604"
} ,
{
"url" : "https://support.apple.com/HT209605" ,
"refsource" : "MISC" ,
"name" : "https://support.apple.com/HT209605"
}
]
2019-03-18 01:26:52 +00:00
} ,
"description" : {
"description_data" : [
{
"lang" : "eng" ,
2019-12-18 18:01:00 +00:00
"value" : "A logic issue was addressed with improved validation. This issue is fixed in iOS 12.2, tvOS 12.2, Safari 12.1, iTunes 12.9.4 for Windows, iCloud for Windows 7.11. A malicious website may be able to execute scripts in the context of another website."
2019-03-18 01:26:52 +00:00
}
]
}
}