Buffer overflow vulnerability in Apple iTunes

Description

A buffer overflow vulnerability was found in WebKit component of Apple iTunes versions earlier than 12.6.1. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed web content.

Original advisories

• Apple security bulletin

Exploitation

Public exploits exist for this vulnerability.

Related products

• Apple-iTunes

CVE list

• CVE-2017-6984
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com