PT-2023-2912 · Apple · Itunes

Ycdxsb · Publicado 2023-05-23 · Atualizado 2024-12-05 · CVE-2023-32351

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iTunes versions prior to 12.12.9 for Windows

Description The issue is related to a logic problem that has been addressed with improved checks. It may allow an app to gain elevated privileges, potentially enabling an attacker to increase their privileges.

Recommendations For versions prior to 12.12.9, update to iTunes 12.12.9 for Windows to resolve the issue.

Correção

Improper Access Control

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-284

CWE-276

CWE-264

Identificadores relacionados

BDU:2023-02877

CVE-2023-32351

Produtos afetados

Itunes

Referências · 8

• https://support.apple.com/en-us/HT213763 · Aviso do Fabricante
• https://cybersecurity-help.cz/vdb/SB2023052339 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2023-32351 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2023-32351 · Aviso do Fabricante
• https://t.me/cvenotify/103155 · Publicação no Telegram
• https://bdu.fstec.ru/vul/2023-02877 · Nota de Segurança
• https://vuldb.com/ru/?id.229909 · Nota
• https://rapid7.com/db/vulnerabilities/apple-itunes-cve-2023-32351 · Nota