Apple iCloud/iTunes CVE-2017-13864 Security Bypass Vulnerability

Bugtraq ID:	102192
Class:	Access Validation Error
CVE:	CVE-2017-13864
Remote:	Yes
Local:	No
Published:	Dec 13 2017 12:00AM
Updated:	Dec 19 2017 09:01PM
Credit:	FURIOUSMAC Team of United States Naval Academy
Vulnerable:	eSignal eSignal 6.0.2 Apple iTunes 12.6.2 Apple iTunes 12.5.5 Apple iTunes 12.5.1 Apple iTunes 12.4.2 Apple iTunes 12.3.2 Apple iTunes 12.3.1 Apple iTunes 11.2.1 Apple iTunes 11.1.5 Apple iTunes 11.1.4 Apple iTunes 11.1.3 Apple iTunes 11.1.2 Apple iTunes 11.1.1 Apple iTunes 11.0.5 Apple iTunes 11.0.4 Apple iTunes 11.0.2 Apple iTunes 10.6.3 Apple iTunes 10.6.1 Apple iTunes 10.5.1 Apple iTunes 10.1.2 Apple iTunes 9.2.1 Apple iTunes 9.0.2 Apple iTunes 9.0.1 .8 Apple iTunes 9.0.1 Apple iTunes 9.0 Apple iTunes 7.3.2 Apple iTunes 7.3.1 Apple iTunes 7.3 Apple iTunes 7.0.2 Apple iTunes 6.0.5 Apple iTunes 6.0.4 Apple iTunes 6.0.3 Apple iTunes 6.0.1 Apple iTunes 6.0 Apple iTunes 5.0 Apple iTunes 4.8 Apple iTunes 4.7.1 Apple iTunes 4.7 Apple iTunes 4.6 Apple iTunes 4.5 Apple iTunes 4.2 .72 Apple iTunes 9.2 Apple iTunes 9.1.1 Apple iTunes 9.1 Apple iTunes 9.0.3 Apple iTunes 8.2 Apple iTunes 8.1 Apple iTunes 8.0.2.20 Apple iTunes 8.0 Apple iTunes 7.4 Apple iTunes 12.7 Apple iTunes 12.6 Apple iTunes 12.5.4 Apple iTunes 12.5.2 Apple iTunes 12.4 Apple iTunes 12.3 Apple iTunes 12.2 Apple iTunes 12.0.1 Apple iTunes 11.2 Apple iTunes 11.1 Apple iTunes 11.0.3 Apple iTunes 11.0.1 Apple iTunes 11.0.0.163 Apple iTunes 11.0 Apple iTunes 10.7 Apple iTunes 10.6.1.7 Apple iTunes 10.6 Apple iTunes 10.5.3 Apple iTunes 10.5.2 Apple iTunes 10.5.1.42 Apple iTunes 10.5 Apple iTunes 10.4.1.10 Apple iTunes 10.4.1 Apple iTunes 10.4.0.80 Apple iTunes 10.4 Apple iTunes 10.3.1 Apple iTunes 10.3 Apple iTunes 10.2.2.12 Apple iTunes 10.2.2 Apple iTunes 10.2 Apple iTunes 10.1.1.4 Apple iTunes 10.1.1 Apple iTunes 10.1 Apple iTunes 10.0.1 Apple iTunes 10 Apple iCloud 6.1.1 Apple iCloud 7.0 Apple iCloud 6.2.2 Apple iCloud 6.2.1 Apple iCloud 6.2 Apple iCloud 6.1 Apple iCloud 6.0.1 Apple iCloud 6.0 Apple iCloud 0
Not Vulnerable:	Apple iTunes 12.7.2 Apple iCloud 7.2

Apple iCloud/iTunes CVE-2017-13864 Security Bypass Vulnerability

Apple iCloud/iTunes are prone to a security bypass vulnerability.

Attackers can exploit this issue to bypass security restrictions and perform unauthorized actions.

The following products are affected:

Versions prior to Apple iCloud for Windows 7.2
Versions prior to Apple iTunes for Windows 12.7.2

Apple iCloud/iTunes CVE-2017-13864 Security Bypass Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple iCloud/iTunes CVE-2017-13864 Security Bypass Vulnerability

References:

• About the security content of iTunes 12.7.2 for Windows (Apple)
  
• Apple Home Page (Apple)
  
• Apple iCloud (Apple)
  
• iTunes Homepage (Apple)
  
• About the security content of iCloud for Windows 7.2 (Apple)
  
• APPLE-SA-2017-12-13-3 iCloud for Windows 7 (apple)
  
• APPLE-SA-2017-12-13-4 iTunes 12.7.2 for Windows (apple)