CVE-2019-8801

EUVD-2019-18191
A dynamic library loading issue existed in iTunes setup. This was addressed with improved path searching. This issue is fixed in macOS Catalina 10.15.1, iTunes for Windows 12.10.2. Running the iTunes installer in an untrusted directory may result in arbitrary code execution.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.8 HIGH
LOCAL
LOW
NONE
CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
Base Score
CVSS 3.x
EPSS Score
Percentile: 36%
Affected Products (NVD)
VendorProductVersion
appleitunes
𝑥
< 12.10.2
applemac_os_x
𝑥
< 10.15.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
https://support.apple.com/HT210722
https://support.apple.com/HT210726
https://support.apple.com/HT210722
https://support.apple.com/HT210726