KLA10077 WLF vulnerability in Apple iTunes

A permissions vulnerability was found in Apple iTunes. By exploiting this vulnerability malicious users can modify local files. This vulnerability can be exploited locally via standard file system operations.

Original advisories

Apple bulletin

Related products

Apple-iTunes

CVE list

CVE-2014-1347 warning

Solution

Update to latest version

iTunew

Impacts

• WLF

Write Local Files. Exploitation of vulnerabilities with this impact can lead to writing into some inaccessible files. Files that can be read depends on concrete program errors.

• RLF

Read Local Files. Exploitation of vulnerabilities with this impact can lead to reading some inaccessible files. Files that can be read depends on conсrete program errors.

Affected Products

• Apple iTunes 11 versions 11.2.0 and earlier for OS X