Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
kasperskyKaspersky LabKLA11592
HistoryOct 07, 2019 - 12:00 a.m.

KLA11592 Multiple vulnerabilities in Apple iTunes

2019-10-0700:00:00
Kaspersky Lab
threats.kaspersky.com
34

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.429 Medium

EPSS

Percentile

97.3%

JSON

Detect date:

10/07/2019

Severity:

Warning

Description:

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code, perform cross-site scripting attack, cause denial of service.

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Affected products:

Apple iTunes earlier than 12.10.1

Solution:

Update to latest version
Download iTunes

Original advisories:

HT210635

Impacts:

ACE

Related products:

Apple iTunes

CVE-IDS:

CVE-2019-87266.8High
CVE-2019-87336.8High
CVE-2019-87076.8High
CVE-2019-87194.3Warning
CVE-2019-87456.8High
CVE-2019-86254.3Warning
CVE-2019-87356.8High
CVE-2019-87636.8High
CVE-2019-87417.8Critical
CVE-2019-88256.8High
CVE-2019-87467.5Critical
CVE-2019-87497.5Critical
CVE-2019-87567.5Critical
CVE-2019-87507.5Critical
CVE-2019-87644.3Warning
CVE-2019-87106.8High
CVE-2019-87286.8High
CVE-2019-87346.8High
CVE-2019-87436.8High
CVE-2019-87516.8High
CVE-2019-87526.8High
CVE-2019-87656.8High
CVE-2019-87666.8High
CVE-2019-87736.8High
CVE-2019-87624.3Warning

References

Related

apple 26
kaspersky 4
openvas 14
freebsd 2
nessus 19
mageia 1
gentoo 1
suse 2
prion 25
cve 25
redhatcve 12
debiancve 12
veracode 12
ubuntucve 12
zdt 1
alpinelinux 12
packetstorm 1
symantec 2
zdi 4
osv 4
threatpost 1
fedora 1
ubuntu 1
debian 1
amazon 1
oraclelinux 1
redhat 1
centos 1
apple
apple
About the security content of iTunes 12.10.1 for Windows
2019-10-07 00:00:00
About the security content of iTunes 12.10.1 for Windows - Apple Support
2019-11-22 06:58:28
About the security content of iCloud for Windows 7.14 - Apple Support
2019-11-22 06:59:51
kaspersky
kaspersky
KLA11593 Multiple vulnerabilities in Apple iCloud
2019-10-07 00:00:00
KLA11579 Multiple vulnerabilities in Apple iCloud
2019-09-07 00:00:00
KLA11580 Multiple vulnerabilities in Apple iTunes
2019-09-07 00:00:00
openvas
openvas
Apple iCloud Security Updates (HT210637_HT210636)
2019-10-10 00:00:00
Apple iTunes Security Updates (HT210635)
2019-10-10 00:00:00
Mageia: Security Advisory (MGASA-2019-0324)
2022-01-28 00:00:00
freebsd
freebsd
webkit2-gtk3 -- Multiple vulnerabilities
2019-10-29 00:00:00
webkit2-gtk3 -- Multiple vulnerabilities
2019-11-08 00:00:00
nessus
nessus
FreeBSD : webkit2-gtk3 -- Multiple vulnerabilities (92243b6a-5775-4aea-8727-a938058df5ba)
2019-11-01 00:00:00
GLSA-202003-22 : WebkitGTK+: Multiple vulnerabilities
2020-03-16 00:00:00
openSUSE Security Update : webkit2gtk3 (openSUSE-2019-2591)
2019-12-03 00:00:00
mageia
mageia
Updated webkit2 packages fix security vulnerabilities
2019-11-14 19:58:51
gentoo
gentoo
WebkitGTK+: Multiple vulnerabilities
2020-03-15 00:00:00
suse
suse
Security update for webkit2gtk3 (important)
2019-11-30 00:00:00
Security update for webkit2gtk3 (important)
2019-11-30 00:00:00
prion
prion
Memory corruption
2020-10-27 20:15:00
Cross site scripting
2020-10-27 20:15:00
Memory corruption
2020-10-27 20:15:00
cve
cve
CVE-2019-8825
2020-10-27 20:15:00
CVE-2019-8773
2020-10-27 20:15:00
CVE-2019-8762
2020-10-27 20:15:00
redhatcve
redhatcve
CVE-2019-8763
2020-09-07 17:49:18
CVE-2019-8765
2020-09-07 12:49:02
CVE-2019-8766
2020-09-07 12:49:09
debiancve
debiancve
CVE-2019-8765
2019-12-18 18:15:00
CVE-2019-8733
2019-12-18 18:15:00
CVE-2019-8764
2019-12-18 18:15:00
veracode
veracode
Arbitrary Code Execution
2020-10-01 03:52:51
Arbitrary Code Execution
2020-10-01 03:52:53
Arbitrary Code Execution
2020-09-10 01:24:04
ubuntucve
ubuntucve
CVE-2019-8763
2019-12-18 00:00:00
CVE-2019-8765
2019-12-18 00:00:00
CVE-2019-8766
2019-12-18 00:00:00
zdt
zdt
JavaScriptCore - GetterSetter Type Confusion During DFG Compilation Exploit
2019-10-30 00:00:00
alpinelinux
alpinelinux
CVE-2019-8765
2019-12-18 18:15:00
CVE-2019-8766
2019-12-18 18:15:00
CVE-2019-8763
2019-12-18 18:15:00
packetstorm
packetstorm
JavaScriptCore GetterSetter Type Confusion
2019-10-30 00:00:00
symantec
symantec
Apple macOS/watchOS/iCloud for Windows CVE-2019-8750 Memory Corruption Vulnerability
2019-10-29 00:00:00
Apple macOS/iCloud for Windows/iTunes CVE-2019-8745 Buffer Overflow Vulnerability
2019-10-08 00:00:00
zdi
zdi
Apple WebKit CSSAnimation Use-After-Free Remote Code Execution Vulnerability
2019-10-08 00:00:00
Apple WebKit HashTable Use-After-Free Remote Code Execution Vulnerability
2019-10-08 00:00:00
Apple Safari FrameDestructionObserver Use-After-Free Remote Code Execution Vulnerability
2019-10-25 00:00:00
osv
osv
CVE-2019-8719
2019-12-18 18:15:36
CVE-2019-8625
2019-12-18 18:15:30
webkit2gtk - security update
2019-11-04 00:00:00
threatpost
threatpost
Apple Tackles Over a Dozen Bugs in its Catalina 10.15 Update
2019-10-08 19:34:54
fedora
fedora
[SECURITY] Fedora 30 Update: webkit2gtk3-2.26.1-3.fc30
2019-11-03 00:14:07
ubuntu
ubuntu
WebKitGTK+ vulnerabilities
2019-11-07 00:00:00
debian
debian
[SECURITY] [DSA 4558-1] webkit2gtk security update
2019-11-04 22:06:37
amazon
amazon
Medium: webkitgtk4
2020-11-09 21:05:00
oraclelinux
oraclelinux
webkitgtk4 security, bug fix, and enhancement update
2020-10-06 00:00:00
redhat
redhat
(RHSA-2020:4035) Moderate: webkitgtk4 security, bug fix, and enhancement update
2020-09-29 07:53:27
centos
centos
webkitgtk4 security update
2020-10-20 19:07:36

9.8 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

8.8 High

AI Score

Confidence

High

7.8 High

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:N/I:N/A:C

0.429 Medium

EPSS

Percentile

97.3%

JSON
Related for KLA11592
apple26kaspersky4openvas14freebsd2nessus19mageia1gentoo1suse2prion25cve25redhatcve12debiancve12veracode12ubuntucve12zdt1alpinelinux12packetstorm1symantec2zdi4osv4threatpost1fedora1ubuntu1debian1amazon1oraclelinux1redhat1centos1