CVE-2020-3868
Summary
| CVE | CVE-2020-3868 |
|---|
| State | PUBLIC |
|---|
| Assigner | [email protected] |
|---|
| Source Priority | CVE Program / NVD first with legacy fallback |
|---|
| Published | 2020-02-27 21:15:00 UTC |
|---|
| Updated | 2021-12-01 18:09:00 UTC |
|---|
| Description | Multiple memory corruption issues were addressed with improved memory handling. This issue is fixed in iOS 13.3.1 and iPadOS 13.3.1, tvOS 13.3.1, Safari 13.0.5, iTunes for Windows 12.10.4, iCloud for Windows 11.0, iCloud for Windows 7.17. Processing maliciously crafted web content may lead to arbitrary code execution. |
|---|
NVD Known Affected Configurations (CPE 2.3)
References
| Reference | Source | Link | Tags |
|---|
| About the security content of tvOS 13.3.1 - Apple Support |
MISC |
support.apple.com |
Release Notes, Vendor Advisory |
| [security-announce] openSUSE-SU-2020:0278-1: important: Security update |
SUSE |
lists.opensuse.org |
Mailing List, Patch, Third Party Advisory |
| About the security content of iCloud for Windows 7.17 - Apple Support |
MISC |
support.apple.com |
Release Notes, Vendor Advisory |
| WebkitGTK+: Multiple vulnerabilities (GLSA 202003-22) — Gentoo security |
GENTOO |
security.gentoo.org |
|
| About the security content of iCloud for Windows 10.9.2 - Apple Support |
MISC |
support.apple.com |
Release Notes, Vendor Advisory |
| CVE Program record |
CVE.ORG |
www.cve.org |
canonical |
| NVD vulnerability detail |
NVD |
nvd.nist.gov |
canonical, analysis |
No vendor comments have been submitted for this CVE.
Legacy QID Mappings
- 296075 Oracle Solaris 11.4 Support Repository Update (SRU) 21.69.0 Missing (CPUAPR2020)
- 377553 Alibaba Cloud Linux Security Update for webkitgtk4 (ALINUX2-SA-2020:0147)
- 770068 Red Hat OpenShift Container Platform 4.6 Security Update (RHSA-2021:0436)
- 940362 AlmaLinux Security Update for GNOME (ALSA-2020:4451)
- 960761 Rocky Linux Security Update for GNOME (RLSA-2020:4451)
