CVE-2024-27793

CWE-94 — Code Injection4 documents4 sources
Severity
7.8HIGH
EPSS
0.4%
top 36.73%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
2
Apple Itunes FOR WindowsApple Itunes
Timeline
PublishedMay 14

Description

The issue was addressed with improved checks. This issue is fixed in iTunes 12.13.2 for Windows. Parsing a file may lead to an unexpected app termination or arbitrary code execution.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9

Affected Packages2 packages

▶CVEListV5apple/itunes_for_windows< 12.13.2
▶NVDapple/itunes< 12.13.2

🔴Vulnerability Details

2
GHSA
GHSA-3m3m-q3hw-6qq6: The issue was addressed with improved checks↗2024-05-14
▶
CVEList
CVE-2024-27793: The issue was addressed with improved checks↗2024-05-08
▶

📋Vendor Advisories

1
Apple
CVE-2024-27793: iTunes 12.13.2 for Windows↗2024-05-08
▶
CVE-2024-27793 (HIGH CVSS 7.8) | The issue was addressed with improv | cvebase.io