cvelist/2020/9xxx/CVE-2020-9858.json

{
    "data_type": "CVE",
    "data_format": "MITRE",
    "data_version": "4.0",
    "CVE_data_meta": {
        "ID": "CVE-2020-9858",
        "ASSIGNER": "product-security@apple.com",
        "STATE": "PUBLIC"
    },
    "affects": {
        "vendor": {
            "vendor_data": [
                {
                    "vendor_name": "Apple",
                    "product": {
                        "product_data": [
                            {
                                "product_name": "Windows Migration Assistant",
                                "version": {
                                    "version_data": [
                                        {
                                            "version_affected": "<",
                                            "version_value": "Windows Migration Assistant 2.2.0.0 (v. 1A11)"
                                        }
                                    ]
                                }
                            }
                        ]
                    }
                }
            ]
        }
    },
    "problemtype": {
        "problemtype_data": [
            {
                "description": [
                    {
                        "lang": "eng",
                        "value": "Running the installer in an untrusted directory may result in arbitrary code execution"
                    }
                ]
            }
        ]
    },
    "references": {
        "reference_data": [
            {
                "url": "https://support.apple.com/HT211186",
                "refsource": "MISC",
                "name": "https://support.apple.com/HT211186"
            }
        ]
    },
    "description": {
        "description_data": [
            {
                "lang": "eng",
                "value": "A dynamic library loading issue was addressed with improved path searching. This issue is fixed in Windows Migration Assistant 2.2.0.0 (v. 1A11). Running the installer in an untrusted directory may result in arbitrary code execution."
            }
        ]
    }
}