説明
Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, obtain sensitive information.
Below is a complete list of vulnerabilities:
- An out-of-bounds write vulnerability in ImageIO can be exploited via special crafted file to cause denial of service and execute arbitrary code.
- A use after free vulnerability in WebKit can be exploiter remotely via special crafted webpage to execute arbitrary code.
- An out-of-bounds read vulnerability in ImageIO can be exploited remotely via special crafted image to execute arbitrary code.
- A security vulnerability in SQLite can be exploited remotely to cause denial of service.
- A use after free vulnerability in libxml2 can be exploited remotely via special crafted file to execute arbitrary code.
- An out-of-bounds write vulnerability in WebKit can be exploited renotely via special crafted web page to execute arbitrary code.
- A memory corruption vulnerability in CoreText can be exploited remotely via special crafted text file to execute arbitrary code.
- A security bypass vulnerability in SQLite can be exploited via special crafted SQL query to cause denial of service.
- A memory corruption vulnerability in SQLite can be exploited remotely to execute arbitrary code.
- An information disclosure vulnerability in SQLite can be exploited remotely to obtain sensitive information.
- Denial of service vulnerability in ImageIO can be exploited to cause denial of service.
オリジナルアドバイザリー
エクスプロイテーション
Public exploits exist for this vulnerability.
関連製品
CVEリスト
- CVE-2020-9876 critical
- CVE-2020-9951 critical
- CVE-2020-9961 critical
- CVE-2020-13435 high
- CVE-2020-13434 high
- CVE-2020-9981 critical
- CVE-2020-9983 critical
- CVE-2020-9947 critical
- CVE-2020-9999 critical
- CVE-2020-13631 high
- CVE-2020-13630 high
- CVE-2020-9849 high
- CVE-2020-36521 high
も参照してください
お住まいの地域に広がる脆弱性の統計をご覧ください statistics.securelist.com
この脆弱性についての記述に不正確な点がありますか？ お知らせください！