Vulnerabilities > CVE-2020-9999 - Out-of-bounds Write vulnerability in Apple products
Attack vector
LOCAL Attack complexity
LOW Privileges required
NONE Confidentiality impact
HIGH Integrity impact
HIGH Availability impact
HIGH Summary
A memory corruption issue was addressed with improved state management. This issue is fixed in macOS Big Sur 11.0.1, iTunes for Windows 12.10.9. Processing a maliciously crafted text file may lead to arbitrary code execution.
Vulnerable Configurations
Common Weakness Enumeration (CWE)
References
- http://seclists.org/fulldisclosure/2020/Dec/32
- http://seclists.org/fulldisclosure/2020/Dec/32
- https://support.apple.com/en-us/HT211931
- https://support.apple.com/en-us/HT211931
- https://support.apple.com/en-us/HT211952
- https://support.apple.com/en-us/HT211952
- https://support.apple.com/kb/HT211843
- https://support.apple.com/kb/HT211843
- https://support.apple.com/kb/HT211844
- https://support.apple.com/kb/HT211844
- https://support.apple.com/kb/HT211850
- https://support.apple.com/kb/HT211850
- https://support.apple.com/kb/HT211935
- https://support.apple.com/kb/HT211935