[Forgot Password]
Login  Register Subscribe

30389

 
 

423868

 
 

244625

 
 

909

 
 

193379

 
 

277

Paid content will be excluded from the download.


Download | Alert*
OVAL

Multiple vulnerability in Apple iTunes - APPLE-SA-2017-03-22-2 (Mac OS X)

ID: oval:org.secpod.oval:def:39508Date: (C)2017-03-23   (M)2024-02-29
Class: PATCHFamily: macos




The host is missing a security update according to Apple advisory, APPLE-SA-2017-03-22-2. The update is required to fix multiple vulnerabilities in Apple iTunes. The flaws are present in SQLite and expat which fails to handle vectors related to iTunes, crafted xml files. Successful exploitation could allow attackers to execute arbitrary code or cause a denial of service.

Platform:
Apple Mac OS X 10.9
Apple Mac OS X 10.10
Apple Mac OS X 10.11
Apple Mac OS X 10.12
Apple Mac OS X Server 10.9
Apple Mac OS X Server 10.10
Apple Mac OS X Server 10.11
Apple Mac OS X Server 10.12
Product:
Apple iTunes
Reference:
APPLE-SA-2017-03-22-2
CVE-2009-3270
CVE-2009-3560
CVE-2009-3720
CVE-2012-1147
CVE-2012-1148
CVE-2012-6702
CVE-2013-7443
CVE-2015-1283
CVE-2015-3414
CVE-2015-3415
CVE-2015-3416
CVE-2015-3717
CVE-2015-6607
CVE-2016-0718
CVE-2016-4472
CVE-2016-5300
CVE-2016-6153
CVE    17
CVE-2016-5300
CVE-2016-4472
CVE-2016-6153
CVE-2009-3560
...

© SecPod Technologies