KLA11292
Multiple vulnerabilities in Apple iTunes
Обновлено: 26/06/2019
Дата обнаружения
09/07/2018
Уровень угрозы
Critical
Описание

Multiple serious vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to cause denial of service, obtain sensitive information, execute arbitrary code and bypass security restrictions.

Below is a complete list of vulnerabilities:

  1. An unknown vulnerability in CFNetwork can be exploited locally to obtain sensitive information;
  2. Multiple memory corruption vulnerabilities in WebKit can be exploited remotely to execute arbitrary code;
  3. A CORS (cross-origin resource sharing) vulnerability can be exploited remotely to bypass security restrictions;
  4. A type confusion vulnerability in WebKit can be exploited remotely to execute arbitrary code;
  5. A race condition vulnerability in WebKit can be exploited remotely to cause denial of service;
  6. Multiple memory corruption vulnerabilities in WebKit can be exploited remotely to cause denial of service.
Пораженные продукты

Apple iTunes earlier than 12.8

Решение

Update to the latest version
Download iTunes

Первичный источник обнаружения
About the security content of iTunes 12.8 for Windows
Оказываемое влияние
?
ACE 
[?]

OSI 
[?]

DoS 
[?]

SB 
[?]
Связанные продукты
Apple iTunes
CVE-IDS
CVE-2018-42930.0Unknown
CVE-2018-42700.0Unknown
CVE-2018-42780.0Unknown
CVE-2018-42840.0Unknown
CVE-2018-42660.0Unknown
CVE-2018-42610.0Unknown
CVE-2018-42620.0Unknown
CVE-2018-42630.0Unknown
CVE-2018-42640.0Unknown
CVE-2018-42650.0Unknown
CVE-2018-42670.0Unknown
CVE-2018-42720.0Unknown
CVE-2018-42710.0Unknown
CVE-2018-42730.0Unknown