cnvd-2019-08708
Vulnerability from cnvd
Title
Apple iOS、tvOS和macOS Mojave Siri API漏洞
Description
Apple iOS等都是美国苹果（Apple）公司的产品。Apple iOS是为移动设备所开发的一套操作系统。Apple tvOS是一套智能电视操作系统。Apple macOS Mojave是一套专为Mac计算机所开发的专用操作系统。Siri是其中的一个语音控制组件。 Apple iOS 12.2之前版本、tvOS 12.2之前版本和macOS Mojave 10.14.4之前版本中的Siri组件的命令请求的处理过程存在安全漏洞。攻击者可借助恶意的应用程序利用该漏洞无需用户授权便可发起命令请求。
Severity
高
Patch Name
Apple iOS、tvOS和macOS Mojave Siri API漏洞的补丁
Patch Description
Apple iOS等都是美国苹果（Apple）公司的产品。Apple iOS是为移动设备所开发的一套操作系统。Apple tvOS是一套智能电视操作系统。Apple macOS Mojave是一套专为Mac计算机所开发的专用操作系统。Siri是其中的一个语音控制组件。 Apple iOS 12.2之前版本、tvOS 12.2之前版本和macOS Mojave 10.14.4之前版本中的Siri组件的命令请求的处理过程存在安全漏洞。攻击者可借助恶意的应用程序利用该漏洞无需用户授权便可发起命令请求。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。
Formal description

目前厂商已发布升级补丁以修复漏洞，补丁获取链接： https://support.apple.com/zh-cn/HT209599

Reference
https://support.apple.com/zh-cn/HT209599
Impacted products
Name
['Apple Apple iOS <12.2', 'Apple tvOS <12.2', 'Apple macOS Mojave <10.14.4']
Show details on source website

To clipboard 

{
  "cves": {
    "cve": {
      "cveNumber": "CVE-2019-8502",
      "cveUrl": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-8502"
    }
  },
  "description": "Apple iOS\u7b49\u90fd\u662f\u7f8e\u56fd\u82f9\u679c\uff08Apple\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Apple iOS\u662f\u4e3a\u79fb\u52a8\u8bbe\u5907\u6240\u5f00\u53d1\u7684\u4e00\u5957\u64cd\u4f5c\u7cfb\u7edf\u3002Apple tvOS\u662f\u4e00\u5957\u667a\u80fd\u7535\u89c6\u64cd\u4f5c\u7cfb\u7edf\u3002Apple macOS Mojave\u662f\u4e00\u5957\u4e13\u4e3aMac\u8ba1\u7b97\u673a\u6240\u5f00\u53d1\u7684\u4e13\u7528\u64cd\u4f5c\u7cfb\u7edf\u3002Siri\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u8bed\u97f3\u63a7\u5236\u7ec4\u4ef6\u3002\n\nApple iOS 12.2\u4e4b\u524d\u7248\u672c\u3001tvOS 12.2\u4e4b\u524d\u7248\u672c\u548cmacOS Mojave 10.14.4\u4e4b\u524d\u7248\u672c\u4e2d\u7684Siri\u7ec4\u4ef6\u7684\u547d\u4ee4\u8bf7\u6c42\u7684\u5904\u7406\u8fc7\u7a0b\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u501f\u52a9\u6076\u610f\u7684\u5e94\u7528\u7a0b\u5e8f\u5229\u7528\u8be5\u6f0f\u6d1e\u65e0\u9700\u7528\u6237\u6388\u6743\u4fbf\u53ef\u53d1\u8d77\u547d\u4ee4\u8bf7\u6c42\u3002",
  "discovererName": "Luke Deshotels of North Carolina State University, Jordan Beichler of North Carolina State University, William Enck of North Carolina State University, Costin Caraba\u0219 of University POLITEHNICA of Bucharest, and R\u0103zvan Deaconescu of University POLITEHNICA of Bucharest",
  "formalWay": "\u76ee\u524d\u5382\u5546\u5df2\u53d1\u5e03\u5347\u7ea7\u8865\u4e01\u4ee5\u4fee\u590d\u6f0f\u6d1e\uff0c\u8865\u4e01\u83b7\u53d6\u94fe\u63a5\uff1a\r\nhttps://support.apple.com/zh-cn/HT209599",
  "isEvent": "\u901a\u7528\u8f6f\u786c\u4ef6\u6f0f\u6d1e",
  "number": "CNVD-2019-08708",
  "openTime": "2019-03-29",
  "patchDescription": "Apple iOS\u7b49\u90fd\u662f\u7f8e\u56fd\u82f9\u679c\uff08Apple\uff09\u516c\u53f8\u7684\u4ea7\u54c1\u3002Apple iOS\u662f\u4e3a\u79fb\u52a8\u8bbe\u5907\u6240\u5f00\u53d1\u7684\u4e00\u5957\u64cd\u4f5c\u7cfb\u7edf\u3002Apple tvOS\u662f\u4e00\u5957\u667a\u80fd\u7535\u89c6\u64cd\u4f5c\u7cfb\u7edf\u3002Apple macOS Mojave\u662f\u4e00\u5957\u4e13\u4e3aMac\u8ba1\u7b97\u673a\u6240\u5f00\u53d1\u7684\u4e13\u7528\u64cd\u4f5c\u7cfb\u7edf\u3002Siri\u662f\u5176\u4e2d\u7684\u4e00\u4e2a\u8bed\u97f3\u63a7\u5236\u7ec4\u4ef6\u3002\r\n\r\nApple iOS 12.2\u4e4b\u524d\u7248\u672c\u3001tvOS 12.2\u4e4b\u524d\u7248\u672c\u548cmacOS Mojave 10.14.4\u4e4b\u524d\u7248\u672c\u4e2d\u7684Siri\u7ec4\u4ef6\u7684\u547d\u4ee4\u8bf7\u6c42\u7684\u5904\u7406\u8fc7\u7a0b\u5b58\u5728\u5b89\u5168\u6f0f\u6d1e\u3002\u653b\u51fb\u8005\u53ef\u501f\u52a9\u6076\u610f\u7684\u5e94\u7528\u7a0b\u5e8f\u5229\u7528\u8be5\u6f0f\u6d1e\u65e0\u9700\u7528\u6237\u6388\u6743\u4fbf\u53ef\u53d1\u8d77\u547d\u4ee4\u8bf7\u6c42\u3002\u76ee\u524d\uff0c\u4f9b\u5e94\u5546\u53d1\u5e03\u4e86\u5b89\u5168\u516c\u544a\u53ca\u76f8\u5173\u8865\u4e01\u4fe1\u606f\uff0c\u4fee\u590d\u4e86\u6b64\u6f0f\u6d1e\u3002",
  "patchName": "Apple iOS\u3001tvOS\u548cmacOS Mojave Siri API\u6f0f\u6d1e\u7684\u8865\u4e01",
  "products": {
    "product": [
      "Apple Apple iOS \u003c12.2",
      "Apple tvOS \u003c12.2",
      "Apple macOS Mojave \u003c10.14.4"
    ]
  },
  "referenceLink": "https://support.apple.com/zh-cn/HT209599",
  "serverity": "\u9ad8",
  "submitTime": "2019-03-28",
  "title": "Apple iOS\u3001tvOS\u548cmacOS Mojave Siri API\u6f0f\u6d1e"
}


Log in or create an account to share your comment.




Tags
Taxonomy of the tags.




Sightings

Author Source Type Date

Nomenclature

  • Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
  • Confirmed: The vulnerability is confirmed from an analyst perspective.
  • Published Proof of Concept: A public proof of concept is available for this vulnerability.
  • Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
  • Patched: This vulnerability was successfully patched by the user reporting the sighting.
  • Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
  • Not confirmed: The user expresses doubt about the veracity of the vulnerability.
  • Not patched: This vulnerability was not successfully patched by the user reporting the sighting.