KLA10813 Privilege escalation vulnerability in Apple iTunes

An unspecified vulnerability was found in Apple iTunes setup. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a DLL hijack.

Original advisories

Apple advisory

Related products

Apple-iTunes

CVE list

CVE-2016-1742 high

Solution

Don’t install vulnerable Apple iTunes versions from untrusted folders

iTunes download page

Impacts

• PE

Privilege escalation. Exploitation of vulnerabilities with this impact can lead to performing by abuser actions, which are normally disallowed for current role.

Affected Products

• Apple iTunes versions earlier than 12.4