[prev in list] [next in list] [prev in thread] [next in thread] 

List:       full-disclosure
Subject:    [FD] APPLE-SA-2018-1-23-7 iCloud for Windows 7.3
From:       Apple Product Security <product-security-noreply () lists ! apple ! com>
Date:       2018-01-24 1:10:39
Message-ID: AD4DF12E-5B0C-4C00-A095-1EA7DFF4362D () lists ! apple ! com
[Download RAW message or body]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

APPLE-SA-2018-1-23-7 iCloud for Windows 7.3

iCloud for Windows 7.3 is now available and addresses the following:

WebKit
Available for: Windows 7 and later
Impact: Processing maliciously crafted web content may lead to
arbitrary code execution
Description: Multiple memory corruption issues were addressed with
improved memory handling.
CVE-2018-4088: Jeonghoon Shin of Theori
CVE-2018-4096: found by OSS-Fuzz

Installation note:

iCloud for Windows 7.3 may be obtained from:
https://support.apple.com/HT204283

Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----
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=UXIo
-----END PGP SIGNATURE-----


_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/
[prev in list] [next in list] [prev in thread] [next in thread]