APPLE-SA-2018-1-23-6 iTunes 12.7.3 for Windows
APPLE-SA-2018-1-23-6 iTunes 12.7.3 for Windows
- Subject: APPLE-SA-2018-1-23-6 iTunes 12.7.3 for Windows
- From: Apple Product Security <email@hidden>
- Date: Tue, 23 Jan 2018 17:10:29 -0800
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
APPLE-SA-2018-1-23-6 iTunes 12.7.3 for Windows
iTunes 12.7.3 for Windows is now available and addresses the
following:
WebKit
Available for: Windows 7 and later
Impact: Processing maliciously crafted web content may lead to
arbitrary code execution
Description: Multiple memory corruption issues were addressed with
improved memory handling.
CVE-2018-4088: Jeonghoon Shin of Theori
CVE-2018-4096: found by OSS-Fuzz
Installation note:
iTunes 12.7.3 for Windows may be obtained from:
https://www.apple.com/itunes/download/
Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222
This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----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=e2O8
-----END PGP SIGNATURE-----
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Security-announce mailing list (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden