Multiple vulnerabilities in Apple iTunes

Description

Multiple serious vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code and obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A buffer overflow vulnerability can be exploited locally to gain privileges;
2. Multiple memory corruption vulnerabilities in WebKit can be exploited remotely via specially crafted website to execute arbitrary code;
3. Multiple array indexing vulnerabilities in WebKit can be exploited remotely to cause denial of service;
4. A cross-origin vulnerability can be exploited remotely to obtain sensitive information;
5. Multiple assert failure vulnerabilities in WebKit can be exploited locally to cause denial of service.

Original advisories

• About the security content of iTunes 12.7.4 for Windows

Exploitation

Public exploits exist for this vulnerability.

Related products

• Apple-iTunes

CVE list

• CVE-2018-4113
  warning
• CVE-2018-4114
  high
• CVE-2018-4117
  warning
• CVE-2018-4118
  high
• CVE-2018-4119
  high
• CVE-2018-4120
  high
• CVE-2018-4121
  high
• CVE-2018-4122
  high
• CVE-2018-4125
  high
• CVE-2018-4127
  high
• CVE-2018-4128
  high
• CVE-2018-4129
  high
• CVE-2018-4130
  high
• CVE-2018-4207
  high
• CVE-2018-4208
  high
• CVE-2018-4209
  high
• CVE-2018-4210
  high
• CVE-2018-4212
  high
• CVE-2018-4213
  high
• CVE-2018-4144
  critical
• CVE-2018-4146
  warning
• CVE-2018-4161
  high
• CVE-2018-4162
  high
• CVE-2018-4163
  high
• CVE-2018-4165
  high
• CVE-2018-4101
  high

Read more

Find out the statistics of the vulnerabilities spreading in your region on statistics.securelist.com