PT-2023-2911 · Apple · Itunes

Bugzzzhunter + 1 · Published 2023-05-23 · Updated 2024-12-05 · CVE-2023-32353

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iTunes versions prior to 12.12.9 for Windows

Description The issue is related to a logic problem that has been addressed with improved checks. It may allow an attacker to elevate privileges.

Recommendations For versions prior to 12.12.9, update to iTunes 12.12.9 for Windows to resolve the issue.

Exploit

Fix

Incorrect Authorization

Improper Access Control

Weakness Enumeration

CWE-863

CWE-284

CWE-264

Related Identifiers

BDU:2023-02876

CVE-2023-32353

Affected Products

Itunes

References · 11

• 🔥 https://github.com/86x/CVE-2023-32353-PoC · Exploit
• https://support.apple.com/en-us/HT213763 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-32353 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32353 · Security Note
• https://bdu.fstec.ru/vul/2023-02876 · Security Note
• https://t.me/cvenotify/103132 · Telegram Post
• https://cybersecurity-help.cz/vdb/SB2023052339 · Note
• https://vuldb.com/ru/?id.229910 · Note
• https://rapid7.com/db/vulnerabilities/apple-itunes-cve-2023-32353 · Note
• https://t.me/cybersecuritytechnologies/8462 · Telegram Post
• https://t.me/ckure/12487 · Telegram Post