CVE-2021-30862

CVE-2021-30862 2021年，CodeColorist 发布了关于 Mistuned 漏洞 的分析文章，这是一系列影响 iTunes Store 的漏洞，可实现一键远程代码执行。值得注意的是，他演示了仅通过一个逻辑错误即可弹出计算器，而无需任何内存损坏。在此期间，我一直在调查各种应用中的 URL 方案，因为两年前我曾报告过 一个关于 App Store 的 itms-services:// URL 方案的安全问题。我发现一个非常相似的 URL 方案是 iTunes U 的 itms-itunesu:// URL...

EUVD-2021-17779

Malware in sbrugna...

CVE-2021-30862

A validation issue was addressed with improved input sanitization. This issue is fixed in iTunes U 3.8.3. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...

Exploit for Improper Input Validation in Apple Itunes_U

CVE-2021-30862 In 2021, CodeColorist released his writeups on...

Apple iTunes U < 3.8.3 A Vulnerability (credentialed check)

The version of Apple iTunes U installed on the remote iOS host is prior to 3.8.3. It is, therefore, affected by a vulnerability as referenced in the HT212809 advisory. - REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by the CVE program. Notes: none...

CVE-2021-30862

A validation issue was addressed with improved input sanitization. This issue is fixed in iTunes U 3.8.3. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...

CVE-2021-30862

A validation issue was addressed with improved input sanitization. This issue is fixed in iTunes U 3.8.3. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...

CVE-2021-30862

A validation issue was addressed with improved input sanitization. This issue is fixed in iTunes U 3.8.3. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...

Input validation

A validation issue was addressed with improved input sanitization. This issue is fixed in iTunes U 3.8.3. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...

CVE-2021-30862

A validation issue was addressed with improved input sanitization. This issue is fixed in iTunes U 3.8.3. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...

CVE-2021-30862

CVE-2021-30862 affects Apple iTunes U prior to version 3.8.3. It is due to a validation/input sanitization issue that can allow processing of a malicious URL to trigger arbitrary JavaScript code execution. Apple patched this in iTunes U 3.8.3 (HT212809). The vulnerability impacts the iTunes U com...

Apple iTunes 输入验证错误漏洞

Apple iTunes is a suite of media player applications from Apple, Inc. that are used to play and manage digital music and video files. An input validation error vulnerability exists in Apple iTunes U versions prior to 3.8.3, where an attacker could cause arbitrary javascript code execution via a...

PT-2021-18922

Name of the Vulnerable Software and Affected Versions iTunes U versions prior to 3.8.3 Description A validation issue was addressed with improved input sanitization. Processing a maliciously crafted URL may lead to arbitrary javascript code execution. Recommendations For versions prior to 3.8.3,...

CVE-2021-30862: Improper Input Validation

A validation issue was addressed with improved input sanitization. This issue is fixed in iTunes U 3.8.3. Processing a maliciously crafted URL may lead to arbitrary javascript code execution...

Apple iTunes U - Persistent POST Inject Web Vulnerability

Document Title: =============== Apple iTunes U - Persistent POST Inject Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1532 Apple ID: 624515538 Release Date: ============= 2015-08-11 Vulnerability Laboratory ID VL-ID:...

Apple iTunes U - Persistent POST Inject Web Vulnerability

Document Title: =============== Apple iTunes U - Persistent POST Inject Web Vulnerability References Source: ==================== http://www.vulnerability-lab.com/getcontent.php?id=1532 Apple ID: 624515538 Release Date: ============= 2015-08-11 Vulnerability Laboratory ID VL-ID:...