Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11127
HistorySep 25, 2017 - 12:00 a.m.

KLA11127 Multiple vulnerabilities in Apple iTunes

2017-09-2500:00:00
Kaspersky Lab
threats.kaspersky.com
68

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.085 Low

EPSS

Percentile

94.3%

JSON

Detect date:

09/25/2017

Severity:

High

Description:

Multiple serious vulnerabilities have been found in Apple iTunes for Windows. These vulnerabilities have been found in WebKit component and can be exploited remotely to execute arbitrary code, perform cross-site scripting, bypass security restrictions and obtain sensitive information.

Affected products:

Apple iTunes for Windows versions earlier than 12.7

Solution:

Update to the latest version
Download iTunes

Original advisories:

About the security content of iTunes 12.7 for Windows

Impacts:

ACE

Related products:

Apple iTunes

CVE-IDS:

CVE-2017-70816.8High
CVE-2017-70876.8High
CVE-2017-70905.0Warning
CVE-2017-70916.8High
CVE-2017-70926.8High
CVE-2017-70936.8High
CVE-2017-70946.8High
CVE-2017-70956.8High
CVE-2017-70966.8High
CVE-2017-70986.8High
CVE-2017-70996.8High
CVE-2017-71006.8High
CVE-2017-71026.8High
CVE-2017-71046.8High
CVE-2017-71076.8High
CVE-2017-71094.3Warning
CVE-2017-71116.8High
CVE-2017-71176.8High
CVE-2017-71206.8High

Exploitation:

Public exploits exist for this vulnerability.

References

Related

nessus 8
openvas 5
zdt 1
ubuntu 1
apple 10
kaspersky 1
mageia 1
freebsd 1
debiancve 19
ubuntucve 19
cve 19
prion 19
zdi 5
checkpoint_advisories 1
packetstorm 1
seebug 1
suse 2
nessus
nessus
Apple iTunes < 12.7 WebKit Multiple Vulnerabilities (credentialed check)
2017-09-27 00:00:00
Apple iTunes < 12.7 WebKit Multiple Vulnerabilities (uncredentialed check)
2017-09-27 00:00:00
Ubuntu 16.04 LTS : WebKitGTK+ vulnerabilities (USN-3460-1)
2017-10-24 00:00:00
openvas
openvas
Apple iTunes Security Updates (HT208141)
2017-10-25 00:00:00
Ubuntu Update for webkit2gtk USN-3460-1
2017-10-25 00:00:00
Apple iCloud Security Updates(HT208142)
2017-09-26 00:00:00
zdt
zdt
WebKitGTK+ Code Execution / Cookie Handling / Memory Corruption Vulnerabilities
2017-10-19 00:00:00
ubuntu
ubuntu
WebKitGTK+ vulnerabilities
2017-10-23 00:00:00
apple
apple
About the security content of Safari 11 - Apple Support
2018-02-14 07:14:51
About the security content of Safari 11
2017-09-19 00:00:00
About the security content of iTunes 12.7 for Windows
2017-09-12 00:00:00
kaspersky
kaspersky
KLA11126 Multiple vulnerabilities in Apple Safari
2017-10-23 00:00:00
mageia
mageia
Updated webkit2 packages fix security vulnerabilities
2017-11-27 00:18:31
freebsd
freebsd
webkit2-gtk3 -- multiple vulnerabilities
2017-10-18 00:00:00
debiancve
debiancve
CVE-2017-7120
2017-10-23 01:29:00
CVE-2017-7093
2017-10-23 01:29:00
CVE-2017-7109
2017-10-23 01:29:00
ubuntucve
ubuntucve
CVE-2017-7109
2017-10-18 00:00:00
CVE-2017-7107
2017-10-18 00:00:00
CVE-2017-7120
2017-10-18 00:00:00
cve
cve
CVE-2017-7090
2017-10-23 01:29:00
CVE-2017-7093
2017-10-23 01:29:00
CVE-2017-7107
2017-10-23 01:29:00
prion
prion
Memory corruption
2017-10-23 01:29:00
Memory corruption
2017-10-23 01:29:00
Memory corruption
2017-10-23 01:29:00
zdi
zdi
Apple Safari RegExp replace Out-Of-Bounds Access Remote Code Execution Vulnerability
2017-09-26 00:00:00
Apple Safari RenderFlowThread Out-Of-Bounds Access Remote Code Execution Vulnerability
2017-09-26 00:00:00
Apple Safari BoundFunction Out-Of-Bounds Access Remote Code Execution Vulnerability
2017-09-26 00:00:00
checkpoint_advisories
checkpoint_advisories
Apple WebKit Denial of Service (CVE-2017-7092)
2019-04-02 00:00:00
packetstorm
packetstorm
WebKit JSC Incorrect Optimization
2017-10-03 00:00:00
seebug
seebug
WebKit: JSC: Incorrect for-in optimization #2(CVE-2017-7117)
2017-10-10 00:00:00
suse
suse
Security update for webkit2gtk3 (important)
2018-01-25 21:10:00
Security update for webkit2gtk3 (important)
2018-02-01 00:14:30

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

8.5 High

AI Score

Confidence

High

6.8 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:P/I:P/A:P

0.085 Low

EPSS

Percentile

94.3%

JSON
Related for KLA11127
nessus8openvas5zdt1ubuntu1apple10kaspersky1mageia1freebsd1debiancve19ubuntucve19cve19prion19zdi5checkpoint_advisories1packetstorm1seebug1suse2