Multiple vulnerabilities in Apple iTunes

Beschreibung

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to bypass security restrictions, gain privileges, execute arbitrary code, perform cross-site scripting attack.

Below is a complete list of vulnerabilities:

1. A memory corruption vulnerability in AppleKeyStore can be exploited to bypass security restrictions;
2. An out-of-bounds read vulnerability in Core Media can be exploited to gain privileges;
3. Multiple memory corruption vulnerabilities in SQLite can be exploited remotely to execute arbitrary code;
4. A type confusion vulnerability in WebKit can be exploited remotely to execute arbitrary code;
5. Multiple memory corruption vulnerabilities in WebKit can be exploited remotely to execute arbitrary code;
6. A logic issue in WebKit can be exploited remotely to perform cross-site scripting attacks.

Ursprüngliche Informationshinweise

• About the security content of iTunes 12.9.3 for Windows

CVE Liste

• CVE-2019-6235
  critical
• CVE-2019-6221
  critical
• CVE-2018-20346
  critical
• CVE-2018-20505
  critical
• CVE-2018-20506
  critical
• CVE-2019-6215
  critical
• CVE-2019-6212
  critical
• CVE-2019-6216
  critical
• CVE-2019-6217
  critical
• CVE-2019-6226
  critical
• CVE-2019-6227
  critical
• CVE-2019-6233
  critical
• CVE-2019-6234
  critical
• CVE-2019-6229
  critical

Mehr erfahren

Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken statistics.securelist.com