Multiple vulnerabilities in Apple iTunes

Описание

Multiple serious vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code and obtain sensitive information.

Below is a complete list of vulnerabilities:

1. An unspecified vulnerability in APNs Server can be exploited remotely to obtain sensitive information;
2. A memory corruption vulnerability can be exploited to execute arbitrary code;
3. An integer overflow vulnerability in ICU can be exploited remotely to obtain sensitive information;
4. Multiple memory corruption vulnerabilities in WebKit can be exploited remotely to execute arbitrary code.

Первичный источник обнаружения

• About the security content of iTunes 12.7.2 for Windows
  

Связанные продукты

• Apple-iTunes

Список CVE

• CVE-2017-15422
  warning
• CVE-2017-7165
  high
• CVE-2017-13870
  high
• CVE-2017-7172
  critical
• CVE-2017-13884
  high
• CVE-2017-13885
  high
• CVE-2017-7156
  high
• CVE-2017-7157
  high
• CVE-2017-13856
  high
• CVE-2017-7160
  high
• CVE-2017-13864
  warning
• CVE-2017-7153
  high
• CVE-2017-13866
  high

Смотрите также

Узнай статистику распространения уязвимостей в своем регионе statistics.securelist.com