Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11279
HistoryDec 06, 2017 - 12:00 a.m.

KLA11279 Multiple vulnerabilities in Apple iTunes

2017-12-0600:00:00
Kaspersky Lab
threats.kaspersky.com
54

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.027 Low

EPSS

Percentile

90.3%

JSON

Detect date:

12/06/2017

Severity:

Critical

Description:

Multiple serious vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code and obtain sensitive information.

Affected products:

Apple iTunes earlier than 12.7.2

Solution:

Update to latest version
Download iTunes

Original advisories:

About the security content of iTunes 12.7.2 for Windows

Impacts:

ACE

Related products:

Apple iTunes

CVE-IDS:

CVE-2017-154224.3Warning
CVE-2017-71656.8High
CVE-2017-138706.8High
CVE-2017-71729.3Critical
CVE-2017-138846.8High
CVE-2017-138856.8High
CVE-2017-71566.8High
CVE-2017-71576.8High
CVE-2017-138566.8High
CVE-2017-71606.8High
CVE-2017-138644.3Warning
CVE-2017-71535.8High
CVE-2017-138666.8High

References

Related

apple 14
openvas 37
nessus 41
mageia 4
gentoo 3
fedora 9
ubuntu 3
zdt 1
prion 13
cve 13
redhatcve 6
ubuntucve 11
debiancve 11
alpinelinux 5
zdi 7
freebsd 2
osv 2
cloudfoundry 1
debian 1
ibm 5
suse 6
redhat 1
chrome 1
kaspersky 1
archlinux 1
apple
apple
About the security content of iCloud for Windows 7.2 - Apple Support
2018-01-25 06:02:26
About the security content of iCloud for Windows 7.2
2017-12-13 00:00:00
About the security content of iTunes 12.7.2 for Windows - Apple Support
2018-10-18 05:09:28
openvas
openvas
Apple iTunes Security Update (HT208326) - Windows
2017-12-28 00:00:00
Apple iCloud Security Update (HT208328) - Windows
2017-12-14 00:00:00
Apple Safari Security Update (HT208324) - Mac OS X
2017-12-28 00:00:00
nessus
nessus
Apple iTunes < 12.7.2 WebKit Multiple Vulnerabilities (credentialed check)
2018-01-08 00:00:00
Apple iTunes < 12.7.2 WebKit Multiple Vulnerabilities (uncredentialed check)
2018-01-08 00:00:00
macOS : Apple Safari < 11.0.2 Multiple Vulnerabilities
2018-01-03 00:00:00
mageia
mageia
Updated webkit2 packages fix security vulnerabilities
2018-01-01 04:17:34
Updated webkit2 packages fix security vulnerabilities
2018-01-27 12:19:00
Updated icu packages fix security vulnerability
2017-12-31 18:14:43
gentoo
gentoo
WebkitGTK+: Multiple vulnerabilities
2018-01-07 00:00:00
WebKitGTK+: Multiple Vulnerabilities
2018-03-22 00:00:00
Chromium, Google Chrome: Multiple vulnerabilities
2018-01-07 00:00:00
fedora
fedora
[SECURITY] Fedora 26 Update: webkitgtk4-2.18.4-1.fc26
2018-01-09 16:52:27
[SECURITY] Fedora 27 Update: webkitgtk4-2.18.4-1.fc27
2017-12-28 02:56:27
[SECURITY] Fedora 26 Update: webkitgtk4-2.18.6-1.fc26
2018-02-02 16:58:50
ubuntu
ubuntu
WebKitGTK+ vulnerabilities
2018-01-03 00:00:00
WebKitGTK+ vulnerabilities
2018-01-30 00:00:00
ICU vulnerability
2018-03-28 00:00:00
zdt
zdt
WebKitGTK+ Memory Corruption / Spoofing / Code Execution Vulnerabilities
2018-01-26 00:00:00
prion
prion
Code injection
2017-12-25 21:29:00
Memory corruption
2017-12-25 21:29:00
Memory corruption
2018-04-03 06:29:00
cve
cve
CVE-2017-13864
2017-12-25 21:29:00
CVE-2017-13884
2018-04-03 06:29:00
CVE-2017-13866
2017-12-25 21:29:00
redhatcve
redhatcve
CVE-2017-13856
2017-12-20 03:49:55
CVE-2017-13866
2017-12-20 03:50:45
CVE-2017-13870
2017-12-20 03:49:35
ubuntucve
ubuntucve
CVE-2017-13884
2017-12-31 00:00:00
CVE-2017-13885
2017-12-31 00:00:00
CVE-2017-13866
2017-12-20 00:00:00
debiancve
debiancve
CVE-2017-13856
2017-12-25 21:29:00
CVE-2017-13884
2018-04-03 06:29:00
CVE-2017-13870
2017-12-25 21:29:00
alpinelinux
alpinelinux
CVE-2017-13856
2017-12-25 21:29:00
CVE-2017-13866
2017-12-25 21:29:00
CVE-2017-13870
2017-12-25 21:29:00
zdi
zdi
(Pwn2Own) Apple Safari DFG JIT Type Confusion Remote Code Execution Vulnerability
2018-02-07 00:00:00
(Pwn2Own) Apple Safari DFG JIT Type Confusion Remote Code Execution Vulnerability
2018-02-07 00:00:00
(Pwn2Own) Apple Safari DFG JIT Type Confusion Remote Code Execution Vulnerability
2018-02-07 00:00:00
freebsd
freebsd
webkit2-gtk3 -- multiple vulnerabilities
2017-10-18 00:00:00
chromium -- multiple vulnerabilities
2017-12-06 00:00:00
osv
osv
CVE-2017-15422
2018-08-28 19:29:11
icu - security update
2018-03-23 00:00:00
cloudfoundry
cloudfoundry
USN-3610-1: ICU vulnerability | Cloud Foundry
2018-05-02 00:00:00
debian
debian
[SECURITY] [DSA 4150-1] icu security update
2018-03-23 18:46:51
ibm
ibm
Security Bulletin: IBM Flex System Chassis Management Module (CMM) is affected by vulnerabilities in ICU
2023-12-07 22:45:02
Security Bulletin: TADDM is vulnerable to a denial of service due to vulnerabilities in ICU4J Library
2023-04-26 14:21:56
Security Bulletin: Multiple vulnerabilities affect IBM Planning Analytics
2019-07-25 18:55:02
suse
suse
Security update for webkit2gtk3 (moderate)
2018-10-26 00:11:58
Security update for icu (moderate)
2018-05-25 11:33:28
Security update for webkit2gtk3 (important)
2018-02-01 00:14:30
redhat
redhat
(RHSA-2017:3401) Critical: chromium-browser security update
2017-12-07 19:20:02
chrome
chrome
Stable Channel Update for Desktop
2017-12-06 00:00:00
kaspersky
kaspersky
KLA11152 Multiple vulnerabilities in Google Chrome
2017-12-07 00:00:00
archlinux
archlinux
[ASA-201712-5] chromium: multiple issues
2017-12-07 00:00:00

8.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

REQUIRED

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

9.3 High

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:M/Au:N/C:C/I:C/A:C

0.027 Low

EPSS

Percentile

90.3%

JSON
Related for KLA11279
apple14openvas37nessus41mageia4gentoo3fedora9ubuntu3zdt1prion13cve13redhatcve6ubuntucve11debiancve11alpinelinux5zdi7freebsd2osv2cloudfoundry1debian1ibm5suse6redhat1chrome1kaspersky1archlinux1