Multiple vulnerabilities in Apple iTunes

Popis

Multiple serious vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code and obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An unspecified vulnerability in APNs Server can be exploited remotely to obtain sensitive information;
2. A memory corruption vulnerability can be exploited to execute arbitrary code;
3. An integer overflow vulnerability in ICU can be exploited remotely to obtain sensitive information;
4. Multiple memory corruption vulnerabilities in WebKit can be exploited remotely to execute arbitrary code.

Oficiální doporučení

• About the security content of iTunes 12.7.2 for Windows

Vykořisťování

Public exploits exist for this vulnerability.

Související produkty

• Apple-iTunes

seznam CVE

• CVE-2017-15422
  high
• CVE-2017-7165
  critical
• CVE-2017-13870
  critical
• CVE-2017-7172
  critical
• CVE-2017-13884
  critical
• CVE-2017-13885
  critical
• CVE-2017-7156
  critical
• CVE-2017-7157
  critical
• CVE-2017-13856
  critical
• CVE-2017-7160
  critical
• CVE-2017-13864
  high
• CVE-2017-7153
  high
• CVE-2017-13866
  critical

Zobrazit více

Zjistěte statistiky zranitelností šířících se ve vaší oblasti statistics.securelist.com