Lucene search

K
kasperskyKaspersky LabKLA67226
HistoryMay 08, 2024 - 12:00 a.m.

KLA67226 ACE vulnerability in Apple iTunes

2024-05-0800:00:00
Kaspersky Lab
threats.kaspersky.com
2
itunes
apple
vulnerability
file parsing
code execution
denial of service
update
ace
dos
cve-2024-27793

7.9 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%

File parsing vulnerability was found in iTunes. Malicious users can exploit this vulnerability to execute arbitrary code, cause denial of service.

Original advisories

About the security content of iTunes 12.13.2 for Windows

Related products

Apple-iTunes

CVE list

CVE-2024-27793 unknown

Solution

Update to the latest version

Download iTunes

Impacts

  • ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

  • DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

Affected Products

  • Apple iTunes earlier than 12.13.2

7.9 High

AI Score

Confidence

Low

0.0004 Low

EPSS

Percentile

9.1%