CVE-2017-7079: Medium severity Apple iTunes vulnerability
Published Oct 23, 2017
·Updated
An issue was discovered in certain Apple products. iTunes before 12.7 is affected. The issue involves the "Data Sync" component. It allows attackers to access iOS backups (written by iTunes) via a crafted app.
Affected Software
1 affected component
Apple iTunes<=12.6.2
Event History
Oct 23, 2017
CVE Published
via MITRE·01:00 AM
Data Sourced
via MITRE·01:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2017-7079?
CVE-2017-7079 has been classified as a medium severity vulnerability.
2
How do I fix CVE-2017-7079?
To fix CVE-2017-7079, update iTunes to version 12.7 or later.
3
What component is affected by CVE-2017-7079?
CVE-2017-7079 affects the 'Data Sync' component in iTunes.
4
Which version of iTunes is vulnerable to CVE-2017-7079?
iTunes versions prior to 12.7 are vulnerable to CVE-2017-7079.
5
What type of access does CVE-2017-7079 allow attackers?
CVE-2017-7079 allows attackers to access iOS backups created by iTunes.