Apple iTunes 权限许可和访问控制问题漏洞

Apple iTunes is a suite of media player applications from Apple Inc. that are used to play and manage digital music and video files. A permission and access control issue exists in Apple iTunes Mobile Device Service, which arises from the application not properly securing the mobile device servic...

Apple iTunes 输入验证错误漏洞

Apple iTunes is a suite of media player applications from Apple Inc. that are used to play and manage digital music and video files. Apple iTunes suffers from an input validation error vulnerability that stems from insufficient validation of user-supplied input. A local attacker can exploit this...

About the security content of iTunes 12.12.4 for Windows

About the security content of iTunes 12.12.4 for Windows This document describes the security content of iTunes 12.12.4 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

KLA12540 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code, cause denial of service, gain privileges. Below is a complete list of vulnerabilities: 1. Integer overflow vulnerability in ImageIO can be exploited to cause execute...

CVE-2022-22629

A buffer overflow issue was addressed with improved memory handling. This issue is fixed in macOS Monterey 12.3, Safari 15.4, watchOS 8.5, iTunes 12.12.3 for Windows, iOS 15.4 and iPadOS 15.4, tvOS 15.4. Processing maliciously crafted web content may lead to arbitrary code execution...

CVE-2022-22612

A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to heap corruption...

CVE-2022-22611

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2022-22611

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2022-22612

CVE-2022-22612 involves a memory consumption issue that can lead to heap corruption when processing a maliciously crafted image. Affected products include Apple media frameworks across macOS Monterey 12.3, tvOS 15.4, iOS 15.4, iPadOS 15.4, watchOS 8.5, and iTunes 12.12.3 for Windows. The root cau...

CVE-2022-22612

A memory consumption issue was addressed with improved memory handling. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to heap corruption...

CVE-2022-22611

An out-of-bounds read was addressed with improved input validation. This issue is fixed in tvOS 15.4, iOS 15.4 and iPadOS 15.4, iTunes 12.12.3 for Windows, watchOS 8.5, macOS Monterey 12.3. Processing a maliciously crafted image may lead to arbitrary code execution...

CVE-2022-22611

CVE-2022-22611 is an Apple vulnerability in ImageIO where processing a maliciously crafted image triggers an out-of-bounds read, addressed by input validation improvements. Affected products include tvOS, iOS, iPadOS, watchOS, macOS Monterey, and iTunes for Windows; fixed in tvOS 15.4, iOS 15.4, ...

Apple iTunes U < 3.8.3 A Vulnerability (uncredentialed check)

The version of Apple iTunes U installed on the remote iOS host is prior to 3.8.3. It is, therefore, affected by a vulnerability as referenced in the HT212809 advisory. - REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by the CVE program. Notes: none...

Apple iTunes U < 3.8.3 A Vulnerability (credentialed check)

The version of Apple iTunes U installed on the remote iOS host is prior to 3.8.3. It is, therefore, affected by a vulnerability as referenced in the HT212809 advisory. - REJECT DO NOT USE THIS CANDIDATE NUMBER. ConsultIDs: none. Reason: This candidate was withdrawn by the CVE program. Notes: none...

Apple iTunes < 12.12.3 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.12.3. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213188 advisory. - Processing a maliciously crafted image may lead to arbitrary code execution CVE-2022-22611 - Processing a...

Apple iTunes < 12.12.3 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.12.3. It is, therefore, affected by multiple vulnerabilities as referenced in the HT213188 advisory. - Processing a maliciously crafted image may lead to arbitrary code execution CVE-2022-22611 - Processing a...

About the security content of iTunes 12.12.3 for Windows

About the security content of iTunes 12.12.3 for Windows This document describes the security content of iTunes 12.12.3 for Windows. About Apple security updates For our customers' protection, Apple doesn't disclose, discuss, or confirm security issues until an investigation has occurred and...

KLA12486 Multiple vulnerabilities in Apple iTunes

Multiple vulnerabilities were found in Apple iTunes. Malicious users can exploit these vulnerabilities to execute arbitrary code, obtain sensitive information. Below is a complete list of vulnerabilities: 1. A code execution vulnerability in ImageIO can be exploited via special crafted image to...

AlmaLinux 8 : GNOME (ALSA-2021:4381)

The remote AlmaLinux 8 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2021:4381 advisory. - A code execution vulnerability exists in the AudioSourceProviderGStreamer functionality of Webkit WebKitGTK 2.30.1. A specially crafted web page can lea...

CVE-2022-23609

CVE-2022-23609 affects iTunesRPC-Remastered, a Windows Discord Rich Presence utility. Multiple sources describe a path traversal vulnerability where improper sanitization of user input enables file deletion, constrained only by process permissions. Connected Red Hat, CNVD/CNNVD, OSV, CVE records ...