The latest version of iTunes now comes installed with macOS Mojave.
Upgrade today to get your favorite music, movies, TV shows, and
podcasts. iTunes is also where you can join Apple Music and stream — or
download and play offline — over 50 million songs, ad‑free.
iTunes 12.9.5.7 direct link download Offline
iTunes enables you to do anything you want with your gadgets, including
backups, synchronizations, contact management and, most importantly,
install applications from the Apple Store. iPhone owners surely know
that in order to buy and install apps hosted by the iTunes Store, they
need the downloadable application which provides the necessary
environment for purchasing software in a secure method.
What's new in iTunes 12.9.5.7
May 29th, 2019
- SQLite:
- Available for: Windows 7 and later
- Impact: An application may be able to gain elevated privileges
- Description: An input validation issue was addressed with improved memory handling.
- CVE-2019-8577: Omer Gull of Checkpoint Research
- SQLite:
- Available for: Windows 7 and later
- Impact: A maliciously crafted SQL query may lead to arbitrary code execution
- Description: A memory corruption issue was addressed with improved input validation.
- CVE-2019-8600: Omer Gull of Checkpoint Research
- SQLite:
- Available for: Windows 7 and later
- Impact: A malicious application may be able to read restricted memory
- Description: An input validation issue was addressed with improved input validation.
- CVE-2019-8598: Omer Gull of Checkpoint Research
- SQLite:
- Available for: Windows 7 and later
- Impact: A malicious application may be able to elevate privileges
- Description: A memory corruption issue was addressed by removing the vulnerable code.
- CVE-2019-8602: Omer Gull of Checkpoint Research
- WebKit:
- Available for: Windows 7 and later
- Impact: Processing maliciously crafted web content may result in the disclosure of process memory
- Description: An out-of-bounds read was addressed with improved input validation.
- CVE-2019-8607: Junho Jang and Hanul Choi of LINE Security Team
- WebKit:
- Available for: Windows 7 and later
- Impact: Processing maliciously crafted web content may lead to arbitrary code execution
- Description: Multiple memory corruption issues were addressed with improved memory handling.
- CVE-2019-6237: G. Geshev working with Trend Micro Zero Day Initiative, Liu Long of Qihoo 360 Vulcan Team
- CVE-2019-8571: 01 working with Trend Micro's Zero Day Initiative
- CVE-2019-8583: sakura of Tencent Xuanwu Lab, jessica (@babyjess1ca_)
of Tencent Keen Lab, and dwfault working at ADLab of Venustech
- CVE-2019-8584: G. Geshev of MWR Labs working with Trend Micro Zero Day Initiative
- CVE-2019-8586: an anonymous researcher
- CVE-2019-8587: G. Geshev working with Trend Micro Zero Day Initiative
- CVE-2019-8594: Suyoung Lee and Sooel Son of KAIST Web Security &
Privacy Lab and HyungSeok Han and Sang Kil Cha of KAIST SoftSec Lab
- CVE-2019-8595: G. Geshev from MWR Labs working with Trend Micro Zero Day Initiative
- CVE-2019-8596: Wen Xu of SSLab at Georgia Tech
- CVE-2019-8597: 01 working with Trend Micro Zero Day Initiative
- CVE-2019-8601: Fluoroacetate working with Trend Micro's Zero Day Initiative
- CVE-2019-8608: G. Geshev working with Trend Micro Zero Day Initiative
- CVE-2019-8609: Wen Xu of SSLab, Georgia Tech
- CVE-2019-8610: Anonymous working with Trend Micro Zero Day Initiative
- CVE-2019-8611: Samuel Groß of Google Project Zero
- CVE-2019-8615: G. Geshev from MWR Labs working with Trend Micro's Zero Day Initiative
- CVE-2019-8619: Wen Xu of SSLab at Georgia Tech and Hanqing Zhao of Chaitin Security Research Lab
- CVE-2019-8622: Samuel Groß of Google Project Zero
- CVE-2019-8623: Samuel Groß of Google Project Zero
- CVE-2019-8628: Wen Xu of SSLab at Georgia Tech and Hanqing Zhao of Chaitin Security Research Lab
 |
|
No comments