Vulnerability CVE-2020-3878 - CERT Civis.Net

Vulnerability Name:

CVE-2020-3878 (CCN-175184)

Assigned:

2019-12-18

Published:

2020-01-28

Updated:

2022-06-05

Summary:

An out-of-bounds read was addressed with improved input validation. This issue is fixed in iOS 13.5 and iPadOS 13.5, macOS Catalina 10.15.5, tvOS 13.4.5, watchOS 6.2.5, iTunes 12.10.7 for Windows, iCloud for Windows 11.2, iCloud for Windows 7.19. Processing a maliciously crafted image may lead to arbitrary code execution.

CVSS v3 Severity:

7.8 High (CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
7.0 High (Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

7.8 High (CCN CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H)
7.0 High (CCN Temporal CVSS v3.1 Vector: CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H/E:P/RL:O/RC:C)

Exploitability Metrics:	Attack Vector (AV): Local Attack Complexity (AC): Low Privileges Required (PR): None User Interaction (UI): Required
Scope:	Scope (S): Unchanged
Impact Metrics:	Confidentiality (C): High Integrity (I): High Availibility (A): High

CVSS v2 Severity:

6.8 Medium (CVSS v2 Vector: AV:N/AC:M/Au:N/C:P/I:P/A:P)

Exploitability Metrics:	Access Vector (AV): Network Access Complexity (AC): Medium Authentication (Au): None
Impact Metrics:	Confidentiality (C): Partial Integrity (I): Partial Availibility (A): Partial

6.8 Medium (CCN CVSS v2 Vector: AV:L/AC:L/Au:S/C:C/I:C/A:C)

Exploitability Metrics:	Access Vector (AV): Local Access Complexity (AC): Low Athentication (Au): Single_Instance
Impact Metrics:	Confidentiality (C): Complete Integrity (I): Complete Availibility (A): Complete

Vulnerability Type:

Vulnerability Consequences:

Gain Access

References:

Source: MITRE
Type: CNA
CVE-2020-3878

Source: XF
Type: UNKNOWN
apple-tvos-cve20203878-code-exec(175184)

Source: CCN
Type: Packet Storm Security [02-07-2020]
macOS/iOS ImageIO PVR Image Processing Heap Corruption

Source: CCN
Type: Packet Storm Security [02-07-2020]
macOS/iOS ImageIO PVR Processing Out-Of-Bounds Read

Source: CCN
Type: Apple security document HT210920
About the security content of tvOS 13.3.1

Source: CCN
Type: Apple security document HT210921
About the security content of watchOS 6.1.2

Source: CCN
Type: Apple security document HT211168
About the security content of iOS 13.5 and iPadOS 13.5

Source: CCN
Type: Apple security document HT211170
About the security content of macOS Catalina 10.15.5, Security Update 2020-003 Mojave, Security Update 2020-003 High Sierra

Source: CCN
Type: Apple security document HT211171
About the security content of tvOS 13.4.5

Source: CCN
Type: Apple security document HT211175
About the security content of watchOS 6.2.5

Source: CCN
Type: Apple security document HT211178
About the security content of iTunes 12.10.7 for Windows

Source: CCN
Type: Apple security document HT211179
About the security content of iCloud for Windows 11.2

Source: CCN
Type: Apple security document HT211181
About the security content of iCloud for Windows 7.19

Source: MISC
Type: Vendor Advisory
https://support.apple.com/HT211168

Source: MISC
Type: Vendor Advisory
https://support.apple.com/HT211170

Source: MISC
Type: Vendor Advisory
https://support.apple.com/HT211171

Source: MISC
Type: Vendor Advisory
https://support.apple.com/HT211175

Source: MISC
Type: Vendor Advisory
https://support.apple.com/HT211178

Source: MISC
Type: Vendor Advisory
https://support.apple.com/HT211179

Source: MISC
Type: Vendor Advisory
https://support.apple.com/HT211181

Vulnerable Configuration:

Configuration 1:

cpe:/o:apple:mac_os_x:10.13.6:*:*:*:*:*:*:*

OR cpe:/a:apple:icloud:*:*:*:*:*:windows:*:* (Version < 7.19)

OR cpe:/a:apple:icloud:*:*:*:*:*:windows:*:* (Version >= 11.0 and < 11.2)

OR cpe:/a:apple:itunes:*:*:*:*:*:windows:*:* (Version < 12.10.7)

OR cpe:/o:apple:iphone_os:*:*:*:*:*:*:*:* (Version < 13.5)

OR cpe:/o:apple:watchos:*:*:*:*:*:*:*:* (Version < 6.2.5)

OR cpe:/o:apple:tvos:*:*:*:*:*:*:*:* (Version < 13.4.5)

OR cpe:/o:apple:ipados:*:*:*:*:*:*:*:* (Version < 13.5)

OR cpe:/o:apple:mac_os_x:*:*:*:*:*:*:*:* (Version >= 10.14 and < 10.14.6)

OR cpe:/o:apple:mac_os_x:10.14.6:security_update_2020-001:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:-:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2018-002:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2018-003:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2019-001:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2019-002:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2019-003:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2019-004:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2019-005:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2019-006:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2019-007:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2020-001:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.13.6:security_update_2020-002:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.14.6:-:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.14.6:security_update_2019-001:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.14.6:security_update_2019-002:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.14.6:security_update_2019-004:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.14.6:security_update_2019-005:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.14.6:security_update_2019-006:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.14.6:security_update_2019-007:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:10.14.6:security_update_2020-002:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:*:*:*:*:*:*:*:* (Version >= 10.13 and < 10.13.6)

OR cpe:/o:apple:mac_os_x:10.14.6:*:*:*:*:*:*:*

OR cpe:/o:apple:mac_os_x:*:*:*:*:*:*:*:* (Version >= 10.15 and < 10.15.5)

Configuration CCN 1:

cpe:/o:apple:tvos:13.3:*:*:*:*:*:*:*

OR cpe:/o:apple:watchos:6.1.1:*:*:*:*:*:*:*

Denotes that component is vulnerable