Multiple vulnerabilities in Apple iTunes

説明

Multiple serious vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code and obtain sensitive information.

Below is a complete list of vulnerabilities:

1. A buffer overflow vulnerability can be exploited locally to gain privileges;
2. Multiple memory corruption vulnerabilities in WebKit can be exploited remotely via specially crafted website to execute arbitrary code;
3. Multiple array indexing vulnerabilities in WebKit can be exploited remotely to cause denial of service;
4. A cross-origin vulnerability can be exploited remotely to obtain sensitive information;
5. Multiple assert failure vulnerabilities in WebKit can be exploited locally to cause denial of service.

オリジナルアドバイザリー

• About the security content of iTunes 12.7.4 for Windows

エクスプロイテーション

Public exploits exist for this vulnerability.

関連製品

• Apple-iTunes

CVEリスト

• CVE-2018-4113
  high
• CVE-2018-4114
  critical
• CVE-2018-4117
  high
• CVE-2018-4118
  critical
• CVE-2018-4119
  critical
• CVE-2018-4120
  critical
• CVE-2018-4121
  critical
• CVE-2018-4122
  critical
• CVE-2018-4125
  critical
• CVE-2018-4127
  critical
• CVE-2018-4128
  critical
• CVE-2018-4129
  critical
• CVE-2018-4130
  critical
• CVE-2018-4207
  critical
• CVE-2018-4208
  critical
• CVE-2018-4209
  critical
• CVE-2018-4210
  critical
• CVE-2018-4212
  critical
• CVE-2018-4213
  critical
• CVE-2018-4144
  critical
• CVE-2018-4146
  high
• CVE-2018-4161
  critical
• CVE-2018-4162
  critical
• CVE-2018-4163
  critical
• CVE-2018-4165
  critical
• CVE-2018-4101
  critical

も参照してください

お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com