Multiple vulnerabilities in Apple iTunes



Published: 2022-05-19 | Updated: 2022-05-26
Risk High
Patch available YES
Number of vulnerabilities 5
CVE-ID CVE-2022-26751
CVE-2022-26711
CVE-2022-26717
CVE-2022-26774
CVE-2022-26773
CWE-ID CWE-20
CWE-190
CWE-416
CWE-264
Exploitation vector Network
Public exploit Public exploit code for vulnerability #3 is available.
Vulnerable software
Subscribe 		iTunes
Client/Desktop applications / Multimedia software

Vendor Apple Inc.

Security Bulletin

This security bulletin contains information about 5 vulnerabilities.

1) Input validation error

EUVDB-ID: #VU63235

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-26751

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No

Description

The vulnerability allows a remote attacker to compromise the affected system.

The vulnerability exists due to insufficient validation of user-supplied input within the processing of HEIC files in the VTDecoderXPCService process in the AppleGraphicsControl. A remote attacker can trick the victim to open a specially crafted image and execute arbitrary code on the system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

iTunes: 12.0 - 12.12.3

CPE2.3 External links

http://support.apple.com/en-us/HT213259

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

2) Integer overflow

EUVDB-ID: #VU63247

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-26711

CWE-ID: CWE-190 - Integer overflow

Exploit availability: No

Description

The vulnerability allows a remote attacker to execute arbitrary code on the target system.

The vulnerability exists due to integer overflow when parsing WebP images in the ImageIO framework. A remote attacker can trick the victim into opening a specially crafted file, trigger an integer overflow and execute arbitrary code on the target system.

Successful exploitation of this vulnerability may result in complete compromise of vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

iTunes: 12.0 - 12.12.3

CPE2.3 External links

http://support.apple.com/en-us/HT213259

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

3) Use-after-free

EUVDB-ID: #VU63282

Risk: High

CVSSv3.1:

CVE-ID: CVE-2022-26717

CWE-ID: CWE-416 - Use After Free

Exploit availability: Yes

Description

The vulnerability allows a remote attacker to compromise vulnerable system.

The vulnerability exists due to a use-after-free error when processing HTML content in WebKit. A remote attacker can trick the victim to visit a specially crafted website, trigger memory corruption and execute arbitrary code on the system.

Successful exploitation of the vulnerability may allow an attacker to compromise vulnerable system.

Mitigation

Install update from vendor's website.

Vulnerable software versions

iTunes: 12.0 - 12.12.3

CPE2.3 External links

http://support.apple.com/en-us/HT213259

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

4) Input validation error

EUVDB-ID: #VU63462

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-26774

CWE-ID: CWE-20 - Improper Input Validation

Exploit availability: No

Description

The vulnerability allows a local user to escalate privileges on the system.

The vulnerability exists due to insufficient validation of user-supplied input. A local user can execute arbitrary code with elevated privileges.

Mitigation

Install update from vendor's website.

Vulnerable software versions

iTunes: 12.0 - 12.12.3

CPE2.3 External links

http://support.apple.com/en-us/HT213259

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?

5) Permissions, Privileges, and Access Controls

EUVDB-ID: #VU63463

Risk: Low

CVSSv3.1:

CVE-ID: CVE-2022-26773

CWE-ID: CWE-264 - Permissions, Privileges, and Access Controls

Exploit availability: No

Description

The vulnerability allows a local user to perform unauthorized actions.

The vulnerability exists due to application does not properly impose security restrictions in Mobile Device Service. A local user can delete files without having access to them.

Mitigation

Install update from vendor's website.

Vulnerable software versions

iTunes: 12.0 - 12.12.3

CPE2.3 External links

http://support.apple.com/en-us/HT213259

Q & A

Can this vulnerability be exploited remotely?

Is there known malware, which exploits this vulnerability?



###SIDEBAR###