-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 APPLE-SA-2019-1-22-6 iCloud for Windows 7.10 iCloud for Windows 7.10 is now available and addresses the following: SQLite Available for: Windows 7 and later Impact: A maliciously crafted SQL query may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved input validation. CVE-2018-20346: Tencent Blade Team CVE-2018-20505: Tencent Blade Team CVE-2018-20506: Tencent Blade Team WebKit Available for: Windows 7 and later Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A type confusion issue was addressed with improved memory handling. CVE-2019-6215: Lokihardt of Google Project Zero WebKit Available for: Windows 7 and later Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: Multiple memory corruption issues were addressed with improved memory handling. CVE-2019-6212: an anonymous researcher, Wen Xu of SSLab at Georgia Tech CVE-2019-6216: Fluoroacetate working with Trend Micro's Zero Day Initiative CVE-2019-6217: Fluoroacetate working with Trend Micro's Zero Day Initiative, Proteas, Shrek_wzw, and Zhuo Liang of Qihoo 360 Nirvan Team CVE-2019-6226: Apple WebKit Available for: Windows 7 and later Impact: Processing maliciously crafted web content may lead to arbitrary code execution Description: A memory corruption issue was addressed with improved memory handling. CVE-2019-6227: Qixun Zhao of Qihoo 360 Vulcan Team CVE-2019-6233: G. Geshev from MWR Labs working with Trend Micro's Zero Day Initiative CVE-2019-6234: G. Geshev from MWR Labs working with Trend Micro's Zero Day Initiative WebKit Available for: Windows 7 and later Impact: Processing maliciously crafted web content may lead to universal cross site scripting Description: A logic issue was addressed with improved validation. CVE-2019-6229: Ryan Pickren (ryanpickren.com) Additional recognition WebKit We would like to acknowledge James Lee (@Windowsrcer) of Kryptos Logic for their assistance. Installation note: iCloud for Windows 7.10 may be obtained from: https://support.apple.com/HT204283 Information will also be posted to the Apple Security Updates web site: https://support.apple.com/kb/HT201222 This message is signed with Apple's Product Security PGP key, and details are available at: https://www.apple.com/support/security/pgp/ -----BEGIN PGP SIGNATURE----- iQJdBAEBCABHFiEEDNXJVNCJJEAVmJdZeC9tht7TK3EFAlxHSS0pHHByb2R1Y3Qt c2VjdXJpdHktbm9yZXBseUBsaXN0cy5hcHBsZS5jb20ACgkQeC9tht7TK3E7Qg/9 HVx6gES7ay+Hs7RUdppwTYO/4jnzt+qtXSGjyfEbw2whNTc3a6/vRMVno/6VOlho +/nwfVlfML5t4CJKEQ+wCHczOSQsU1oCtbBUEDyH9p/NCznqUsJ3rcBxGTSJkhy9 YWK+aQfTKAD1RQz0DOWjBRARKfjBVv8X8UbF38fyVMsBLIc0vKaPh3XG7k4YQ3nG wfV4ypKfMBp6WJVQKIrYgh7+osw4YbNU6hcMMLoMY5sHZW8mDPRyXZc4xeRl/fyB FSUsFxNqepAkYIyAUr1lvfvwPLdC9xZ1dMcgyc9IFyba1pR4NdHMcgJpyVSEsDbw mUAhAPxVovELAhpiEjTsH7V5BUVCvGKKcYi7LoExCvugCXqupXqm+u6K+HDbnhZY ykJyONoXHPW1V8M0RFzhjIDj8W4VTh9V+elezakVfDcKvZ//tM2npMuhbV+BVXGQ YdoJrr7IrM/Y5Doxvea9DiI+rGXq2xvul59o4+NYO64tA/3fdBByhQYf+Nj5+G8m O05oopyLRYT7EFa1WFofUOAuaG2Q9wH69mZZ7oEOypu5PJX368vfr20B13uExAaN aH6rdnSx8JPUre/eOhZJdcMY+G/+0A2UpvBBgaDdpLV9ObY7liCDzW8c6nLdQlkg q6zv1m5Hr3lTdPatr9RVXZbVk2ba4h+Y1eF2W4Pnois= =Se7x -----END PGP SIGNATURE-----
