Lucene search

K
kasperskyKaspersky LabKLA49284
HistoryMay 23, 2023 - 12:00 a.m.

KLA49284 Multiple vulnerabilities in Apple iTunes

2023-05-2300:00:00
Kaspersky Lab
threats.kaspersky.com
7

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0 Low

EPSS

Percentile

8.0%

Detect date:

05/23/2023

Severity:

Warning

Description:

An elevation of privilege vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to gain privileges.

Exploitation:

Malware exists for this vulnerability. Usually such malware is classified as Exploit. More details.

Affected products:

Apple iTunes earlier than 12.12.9

Solution:

Update to the latest version
Download iTunes

Original advisories:

About the security content of iTunes 12.12.9 for Windows

Impacts:

PE

Related products:

Apple iTunes

CVE-IDS:

CVE-2023-323537.8Critical
CVE-2023-323517.8Critical

7.8 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

8 High

AI Score

Confidence

High

4.3 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

PARTIAL

AV:L/AC:L/Au:S/C:P/I:P/A:P

0 Low

EPSS

Percentile

8.0%