NVD Vulnerability Detail

CVE-2019-6224

Summary	A buffer overflow issue was addressed with improved memory handling. This issue is fixed in iOS 12.1.3, macOS Mojave 10.14.3, tvOS 12.1.2, watchOS 5.1.3. A remote attacker may be able to initiate a FaceTime call causing arbitrary code execution.
Publication Date	March 6, 2019, 1:29 a.m.
Registration Date	Jan. 26, 2021, 11:43 a.m.
Last Update	Nov. 21, 2024, 1:46 p.m.

Affected software configurations

Related information, measures and tools

No	URL	タグ
1	http://www.securityfocus.com/bid/106739	Third Party Advisory
2	https://support.apple.com/HT209443	Vendor Advisory
3	https://support.apple.com/HT209446	Vendor Advisory
4	https://support.apple.com/HT209447	Vendor Advisory
5	https://support.apple.com/HT209448	Vendor Advisory
6	https://www.exploit-db.com/exploits/46433/	Exploit Third Party Advisory
7	http://www.securityfocus.com/bid/106739	Third Party Advisory
8	https://www.exploit-db.com/exploits/46433/	Exploit Third Party Advisory
9	https://support.apple.com/HT209448	Vendor Advisory
10	https://support.apple.com/HT209447	Vendor Advisory
11	https://support.apple.com/HT209446	Vendor Advisory
12	https://support.apple.com/HT209443	Vendor Advisory

Common Vulnerabilities List

No	CWE	Name	URL
1	CWE-119	バッファエラー	https://cwe.mitre.org/data/definitions/118.html

JVN Vulnerability Information

複数の Apple 製品におけるバッファオーバーフローの脆弱性

Title	複数の Apple 製品におけるバッファオーバーフローの脆弱性
Summary	複数の Apple 製品には、メモリ処理に不備があるため、バッファオーバーフローの脆弱性が存在します。
Possible impacts	リモートの攻撃者により、FaceTime を介して、任意のコードを実行される可能性があります。
Solution	ベンダより正式な対策が公開されています。ベンダ情報を参照して適切な対策を実施してください。
Publication Date	Jan. 22, 2019, midnight
Registration Date	April 4, 2019, 4:20 p.m.
Last Update	April 4, 2019, 4:20 p.m.

Affected System

アップル

Apple Mac OS X 10.13.6

Apple Mac OS X 10.14.2

Apple Mac OS X 10.13.6

Apple Mac OS X 10.14.2

iOS 12.1.3 未満 (iPad Air 以降)

iOS 12.1.3 未満 (iPhone 5s 以降)

iOS 12.1.3 未満 (iPod touch 第 6 世代)

iOS 12.1.3 未満 (iPad Air 以降)

iOS 12.1.3 未満 (iPhone 5s 以降)

iOS 12.1.3 未満 (iPod touch 第 6 世代)

tvOS 12.1.2 未満 (Apple TV 4K)

tvOS 12.1.2 未満 (Apple TV 第 4 世代)

tvOS 12.1.2 未満 (Apple TV 4K)

tvOS 12.1.2 未満 (Apple TV 第 4 世代)

watchOS 5.1.3 未満 (Apple Watch Series 1 以降)

CVE (情報セキュリティ共通脆弱性識別子)

No	Name	URL
Common Vulnerabilities and Exposures (CVE)
1	CVE-2019-6224	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6224
2	CVE-2019-6224	https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2019-6224
National Vulnerability Database (NVD)
3	CVE-2019-6224	https://nvd.nist.gov/vuln/detail/CVE-2019-6224
4	CVE-2019-6224	https://nvd.nist.gov/vuln/detail/CVE-2019-6224

CWE (共通脆弱性タイプ一覧)

No	Name	URL
JVNDB
1	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html
2	CWE-119	https://jvndb.jvn.jp/ja/cwe/CWE-119.html

ベンダー情報

No	Name	URL
Apple Security Updates
1	HT209443	https://support.apple.com/en-us/HT209443
2	HT209443	https://support.apple.com/en-us/HT209443
3	HT209446	https://support.apple.com/en-us/HT209446
4	HT209446	https://support.apple.com/en-us/HT209446
5	HT209447	https://support.apple.com/en-us/HT209447
6	HT209447	https://support.apple.com/en-us/HT209447
7	HT209448	https://support.apple.com/en-us/HT209448
8	HT209448	https://support.apple.com/en-us/HT209448
Apple セキュリティアップデート
9	HT209443	https://support.apple.com/ja-jp/HT209443
10	HT209443	https://support.apple.com/ja-jp/HT209443
11	HT209446	https://support.apple.com/ja-jp/HT209446
12	HT209446	https://support.apple.com/ja-jp/HT209446
13	HT209447	https://support.apple.com/ja-jp/HT209447
14	HT209447	https://support.apple.com/ja-jp/HT209447
15	HT209448	https://support.apple.com/ja-jp/HT209448
16	HT209448	https://support.apple.com/ja-jp/HT209448

その他

No	Name	URL
JVN
1	JVNVU#97670311	https://jvn.jp/vu/JVNVU97670311/index.html
2	JVNVU#97670311	https://jvn.jp/vu/JVNVU97670311/index.html

Change Log

No	Changed Details	Date of change
1	[2019年04月04日] 掲載	April 4, 2019, 4:20 p.m.