what you don't know can hurt you
Home Files News &[SERVICES_TAB]About Contact Add New

Apple Security Advisory 2022-03-14-10

Apple Security Advisory 2022-03-14-10
Posted Mar 15, 2022
Authored by Apple | Site apple.com

Apple Security Advisory 2022-03-14-10 - iTunes 12.12.3 for Windows addresses buffer overflow, code execution, and out of bounds read vulnerabilities.

tags | advisory, overflow, vulnerability, code execution
systems | windows, apple
advisories | CVE-2022-22611, CVE-2022-22612, CVE-2022-22629, CVE-2022-22662
SHA-256 | d60f7de8c77e9349c820e4a1a4dc41061ca68b4b615d4db930a30588a5c9dfa7

Apple Security Advisory 2022-03-14-10

Change Mirror Download
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

APPLE-SA-2022-03-14-10 iTunes 12.12.3 for Windows

iTunes 12.12.3 for Windows addresses the following issues.
Information about the security content is also available at
https://support.apple.com/HT213188.

ImageIO
Available for: Windows 10 and later
Impact: Processing a maliciously crafted image may lead to arbitrary
code execution
Description: An out-of-bounds read was addressed with improved input
validation.
CVE-2022-22611: Xingyu Jin of Google

ImageIO
Available for: Windows 10 and later
Impact: Processing a maliciously crafted image may lead to heap
corruption
Description: A memory consumption issue was addressed with improved
memory handling.
CVE-2022-22612: Xingyu Jin of Google

WebKit
Available for: Windows 10 and later
Impact: Processing maliciously crafted web content may disclose
sensitive user information
Description: A cookie management issue was addressed with improved
state management.
WebKit Bugzilla: 232748
CVE-2022-22662: Prakash (@1lastBr3ath) of Threat Nix

WebKit
Available for: Windows 10 and later
Impact: Processing maliciously crafted web content may lead to
arbitrary code execution
Description: A buffer overflow issue was addressed with improved
memory handling.
WebKit Bugzilla: 234966
CVE-2022-22629: Jeonghoon Shin at Theori working with Trend Micro
Zero Day Initiative

iTunes 12.12.3 for Windows may be obtained from:
https://www.apple.com/itunes/download/
All information is also posted on the Apple Security Updates
web site: https://support.apple.com/en-us/HT201222.

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

-----BEGIN PGP SIGNATURE-----
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PRjy
-----END PGP SIGNATURE-----


Login or Register to add favorites

File Archive:

April 2024

  • Su
  • Mo
  • Tu
  • We
  • Th
  • Fr
  • Sa
  • 1
    Apr 1st
    10 Files
  • 2
    Apr 2nd
    26 Files
  • 3
    Apr 3rd
    40 Files
  • 4
    Apr 4th
    6 Files
  • 5
    Apr 5th
    26 Files
  • 6
    Apr 6th
    0 Files
  • 7
    Apr 7th
    0 Files
  • 8
    Apr 8th
    22 Files
  • 9
    Apr 9th
    14 Files
  • 10
    Apr 10th
    10 Files
  • 11
    Apr 11th
    13 Files
  • 12
    Apr 12th
    14 Files
  • 13
    Apr 13th
    0 Files
  • 14
    Apr 14th
    0 Files
  • 15
    Apr 15th
    30 Files
  • 16
    Apr 16th
    10 Files
  • 17
    Apr 17th
    22 Files
  • 18
    Apr 18th
    45 Files
  • 19
    Apr 19th
    8 Files
  • 20
    Apr 20th
    0 Files
  • 21
    Apr 21st
    0 Files
  • 22
    Apr 22nd
    11 Files
  • 23
    Apr 23rd
    68 Files
  • 24
    Apr 24th
    0 Files
  • 25
    Apr 25th
    0 Files
  • 26
    Apr 26th
    0 Files
  • 27
    Apr 27th
    0 Files
  • 28
    Apr 28th
    0 Files
  • 29
    Apr 29th
    0 Files
  • 30
    Apr 30th
    0 Files

Top Authors In Last 30 Days

File Tags

Systems

packet storm

© 2022 Packet Storm. All rights reserved.

Services
Security Services
Hosting By
Rokasec
close