First published: Tue Jan 28 2020(Updated: )
Mobile Device Service. The issue was addressed with improved permissions logic.
Credit: Andrea Pierini @decoder_it Christian Danieli @padovah4ck product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
Apple iTunes for Windows | <12.10.4 | 12.10.4 |
Apple Itunes Windows | <12.10.4 |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
(Found alongside the following vulnerabilities)
The vulnerability ID for this issue is CVE-2020-3861.
The affected software is iTunes for Windows version up to exclusive 12.10.4.
The issue addressed in this vulnerability is related to improved permissions logic in the Mobile Device Service.
To fix this vulnerability, update iTunes for Windows to version 12.10.4 or higher.
More information about this vulnerability can be found on the Apple support website at https://support.apple.com/en-us/HT210923.