Multiple vulnerabilities in Apple iTunes

Beschreibung

Multiple serious vulnerabilities have been found in iTunes. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or obtain sensitive information.

Below is a complete list of vulnerabilities

1. Multiple memory corruptions at CoreText, WebKit and ICU can be exploited remotely via an unknown vectors to cause denial of service or execute arbitrary code;
2. Improper library loading at Microsoft Visual C++ Redistributable Package can be exploited remotely via a specially designed media file to cause denial of service;
3. Improper network connection handling can be exploited remotely via an unknown vectors to obtain sensitive information.

---

Technical details

(3) can be exploited to obtain encrypted SMB credentials.

Ursprüngliche Informationshinweise

• Apple advisory

CVE Liste

• CVE-2015-1152
  critical
• CVE-2015-1153
  critical
• CVE-2015-3741
  critical
• CVE-2015-3746
  critical
• CVE-2015-3743
  critical
• CVE-2015-5755
  critical
• CVE-2015-3688
  critical
• CVE-2015-1205
  critical
• CVE-2015-3747
  critical
• CVE-2015-3744
  critical
• CVE-2015-5806
  critical
• CVE-2015-3734
  critical
• CVE-2015-3748
  critical
• CVE-2015-3742
  critical
• CVE-2015-3738
  critical
• CVE-2015-3740
  critical
• CVE-2015-3733
  critical
• CVE-2015-5822
  critical
• CVE-2015-5803
  critical
• CVE-2015-5823
  critical
• CVE-2015-5804
  critical
• CVE-2015-5797
  critical
• CVE-2015-5796
  critical
• CVE-2015-1157
  critical
• CVE-2015-3745
  critical
• CVE-2015-5790
  critical
• CVE-2015-5810
  critical
• CVE-2015-5811
  critical
• CVE-2015-5795
  critical
• CVE-2015-5794
  critical
• CVE-2015-5793
  critical
• CVE-2015-5792
  critical
• CVE-2015-5920
  critical
• CVE-2015-5805
  critical
• CVE-2015-3730
  critical
• CVE-2015-5761
  critical
• CVE-2015-5813
  critical
• CVE-2015-5812
  critical
• CVE-2015-5791
  critical
• CVE-2015-5789
  critical
• CVE-2015-5814
  critical
• CVE-2015-5819
  critical
• CVE-2015-5799
  critical
• CVE-2015-3686
  critical
• CVE-2015-3687
  critical
• CVE-2015-5815
  critical
• CVE-2015-5807
  critical
• CVE-2015-5817
  critical
• CVE-2015-5816
  critical
• CVE-2015-3735
  critical
• CVE-2015-3736
  critical
• CVE-2015-5801
  critical
• CVE-2015-5802
  critical
• CVE-2015-5798
  critical
• CVE-2015-5808
  critical
• CVE-2015-5818
  critical
• CVE-2015-3749
  critical
• CVE-2015-3737
  critical
• CVE-2015-3731
  critical
• CVE-2015-3739
  critical
• CVE-2014-8146
  critical
• CVE-2010-3190
  critical
• CVE-2015-5800
  critical
• CVE-2015-5821
  critical
• CVE-2015-5874
  critical
• CVE-2015-5809
  critical

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com