KLA11455
Multiple vulnerabilities in Apple iTunes

Aktualisiert: 04/03/2019

Erkennungsdatum ?	03/25/2019
Schweregrad ?	Kritisch
Beschreibung	Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack, obtain sensitive information, bypass security restrictions and gain privileges. Below is a complete list of vulnerabilities: A type confusion vulnerability in WebKit can be exploited remotely to execute arbitrary code; Multiple memory corruption vulnerabilities can be exploited remotely to execute arbitrary code; Multiple logic vulnerabilities in WebKit can be exploited remotely to perform cross-site scripting attack; A validation vulnerability in WebKit can be exploited remotely to obtain sensitive information; A memory corruption vulnerability can be exploited loccaly to bypass security restrictions; A buffer overflow vulnerability in CoreCrypto can be exploited locally to elevate privileges; A cross-origin vulnerability in WebKit can be exploited locally to obtain sensitive information;
Beeinträchtigte Produkte	Apple iTunes earlier than 12.9.4
Lösung	Update to the latest version Download iTunes
Ursprüngliche Informationshinweise	HT209604
Folgen ?	ACE [?] OSI [?] SB [?] PE [?]
	Link zum Original
	Informieren Sie sich über die Statistiken der in Ihrer Region verbreiteten Sicherheitslücken

KLA11455Multiple vulnerabilities in Apple iTunes