PT-2023-2912 · Apple · Itunes

Ycdxsb · Published 2023-05-23 · Updated 2024-12-05 · CVE-2023-32351

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions iTunes versions prior to 12.12.9 for Windows

Description The issue is related to a logic problem that has been addressed with improved checks. It may allow an app to gain elevated privileges, potentially enabling an attacker to increase their privileges.

Recommendations For versions prior to 12.12.9, update to iTunes 12.12.9 for Windows to resolve the issue.

Fix

Improper Access Control

Incorrect Default Permissions

Weakness Enumeration

CWE-284

CWE-276

CWE-264

Related Identifiers

BDU:2023-02877

CVE-2023-32351

Affected Products

Itunes

References · 8

• https://support.apple.com/en-us/HT213763 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-32351 · Security Note
• https://osv.dev/vulnerability/CVE-2023-32351 · Vendor Advisory
• https://bdu.fstec.ru/vul/2023-02877 · Security Note
• https://cybersecurity-help.cz/vdb/SB2023052339 · Note
• https://t.me/cvenotify/103155 · Telegram Post
• https://vuldb.com/ru/?id.229909 · Note
• https://rapid7.com/db/vulnerabilities/apple-itunes-cve-2023-32351 · Note