CVE-2016-1742

Untrusted search path vulnerability in the installer in Apple iTunes before 12.4 allows local users to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2016-1742

CVE-2016-1742 concerns an untrusted search path vulnerability in the Apple iTunes installer prior to version 12.4. The issue allows local privilege escalation by placing a Trojan horse DLL in the current working directory, triggering code execution with the user’s privileges during installation. ...

KLA10813 Privilege escalation vulnerability in Apple iTunes

An unspecified vulnerability was found in Apple iTunes setup. By exploiting this vulnerability malicious users can gain privileges. This vulnerability can be exploited locally via a DLL hijack. Original advisories Apple advisory Related products Apple-iTunes CVE list CVE-2016-1742 high Solution...

Apple Patches DROWN, Lockscreen Bypass Vulnerability, With Latest Round of Updates

Apple on Monday rolled out a series of patches for nearly all of its operating systems, OS X, iOS, its smart watch operating system, watchOS, and Apple TV’s tvOS, along with fixes for both iTunes and Safari. OS X received the lion’s share of the updates, 67 in total, bringing Apple’s operating...

affiliate.itunes.apple.com XSS vulnerability

Vulnerable URL: https://affiliate.itunes.apple.com/resources/wp-includes/js/mediaelement/flashmediaelement.swf?jsinitfunctio%gn=alertOPENBUGBOUNTY Details: Description| Value ---|--- Patched:| Yes, at 18.06.2016 Latest check for patch:| 18.06.2016 17:57 GMT Vulnerability type:| XSS Vulnerability...

About the security content of iTunes 12.4 - Apple Support

For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To learn more about Apple Product Security, see the Apple Product Security website. For information about...

Apple Releases Multiple Security Updates

Apple has released security updates for tvOS, iOS, watchOS, OS X El Capitan, Safari, and iTunes. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Available updates include: tvOS 9.2.1 for Apple TV 4th generation iOS 9.3.2 for iPhone ...

About the security content of iTunes 12.4

About the security content of iTunes 12.4 This document describes the security content of iTunes 12.4. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a full investigation has occurred and any necessary patches or releases are available. To...

Android Ransomware Attacks Using Towelroot, Hacking Team Exploits

A menacing wave of ransomware that locks up Android devices and demands victims pay $200 in Apple iTunes gift card codes is raising concern among security researchers. The ransomware attacks, they say, open a new chapter for Android vulnerabilities similar to Microsoft’s obsolete, unpatched and...

iSyncr: iTunes to Android - Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application iSyncr: iTunes to Android published at the 'play' market has multiple vulnerabilities...

iSyncr for iTunes to Android - Customized SSL, Exported ContentProvider vulnerabilities

HackApp vulnerability scanner discovered that application iSyncr for iTunes to Android published at the 'play' market has multiple vulnerabilities...

Apple Could Offer iMessage App for Android

Although Apple has its own operating system for both desktop Mac OS X and iPhone iOS, the company has always tried to port its in-house applications to other OS platforms. Apple debuted on its rival mobile OS platform last year with the launch of Apple Music on Android. However, iTunes and Safari...

Apple iTunes < 12.3.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.3.2. It is, therefore, affected by multiple vulnerabilities in the WebKit component : - Multiple memory corruption issues exists that an attacker can exploit to cause a denial of service or execute arbitrary code...

Apple iTunes < 12.3.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes running on the remote Windows host is prior to 12.3.2. It is, therefore, affected by multiple vulnerabilities in the WebKit component : - Multiple memory corruption issues exists that an attacker can exploit to cause a denial of service or execute arbitrary code...

KLA10721 Multiple vulnerabilities in Apple iTunes

Multiple serious vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or obtain sensitive information. Below is a complete list of vulnerabilities 1. Multiple memory corruption issues could be exploit...

Apple Releases Security Update for iTunes

Apple has released a security update for Apple iTunes to address multiple vulnerabilities. Exploitation of some of these vulnerabilities may allow a remote attacker to take control of an affected system. Users and administrators are encouraged to review information on iTunes 12.3.2 and apply the...

The vulnerability of the multi-media player iTunes and operating systems Mac OS X and iOS allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the CoreText component in the multimedia player iTunes and operating systems Mac OS X and iOS arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure using a specially crafted font file...

The vulnerability of the multi-media player iTunes and operating systems Mac OS X and iOS allows a hacker to execute arbitrary code or cause a service failure.

The vulnerability of the CoreText component in the multimedia player iTunes and operating systems Mac OS X and iOS arises due to buffer overflow. Exploiting this vulnerability allows a malicious actor to execute arbitrary code or cause a service failure using a specially crafted font file...

Apple iTunes Multiple Vulnerabilities (Nov 2015) - Windows

Apple iTunes is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...

Apple iOS/Safari/iTunes Memory Corruption Vulnerability (CNVD-2015-07151)

iOS is an operating system developed by Apple for mobile devices; Safari is the latest operating system for Apple computers; the browser in Mac OS X. iTunes is a digital media playback application. A security vulnerability exists in WebKit in Apple iOS versions prior to 9.1, Safari versions prior...