CVE-2017-7079
First published: Mon Oct 23 2017(Updated: )
An issue was discovered in certain Apple products. iTunes before 12.7 is affected. The issue involves the "Data Sync" component. It allows attackers to access iOS backups (written by iTunes) via a crafted app.
Credit: product-security@apple.com
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Apple iTunes | <=12.6.2 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Frequently Asked Questions
What is the severity of CVE-2017-7079?
CVE-2017-7079 has been classified as a medium severity vulnerability.
How do I fix CVE-2017-7079?
To fix CVE-2017-7079, update iTunes to version 12.7 or later.
What component is affected by CVE-2017-7079?
CVE-2017-7079 affects the 'Data Sync' component in iTunes.
Which version of iTunes is vulnerable to CVE-2017-7079?
iTunes versions prior to 12.7 are vulnerable to CVE-2017-7079.
What type of access does CVE-2017-7079 allow attackers?
CVE-2017-7079 allows attackers to access iOS backups created by iTunes.
- collector/nvd-index
- vendor/apple
- canonical/apple itunes
- version/apple itunes/12.6.2