KLA11013 Buffer overflow vulnerability in Apple iTunes

Detect date:

05/15/2017

Severity:

High

Description:

A buffer overflow vulnerability was found in WebKit component of Apple iTunes versions earlier than 12.6.1. By exploiting this vulnerability malicious users can execute arbitrary code. This vulnerability can be exploited remotely via a specially designed web content.

Affected products:

Apple iTunes versions earlier than 12.6.1

Solution:

Update to the latest version
Download iTunes

Original advisories:

Apple security bulletin

Impacts:

ACE

Related products:

Apple iTunes

CVE-IDS:

CVE-2017-69846.8High

Exploitation:

Public exploits exist for this vulnerability.