Apple iTunes up to 12.11.3 on Windows ImageIO buffer overflow

A vulnerability classified as critical was found in Apple iTunes up to 12.11.3 on Windows (Multimedia Player Software). Affected by this vulnerability is some unknown functionality of the component ImageIO. Upgrading to version 12.11.4 eliminates this vulnerability. A possible mitigation has been published immediately after the disclosure of the vulnerability.

Common Vulnerabilityies and Exposures

Contact us to get started

CVE-2024-4129 : SNOW SOFTWARE SNOW LICENSE MANAGER UP TO 9.34.0 ON WINDOWS ACTIVE DIRECTORY AUTHENTICATION IMPROPER AUTHENTICATION

CVE-2024-4129 : SNOW SOFTWARE SNOW LICENSE MANAGER UP TO 9.34.0 ON WINDOWS ACTIVE DIRECTORY AUTHENTICATION IMPROPER AUTHENTICATION

Description Improper Authentication vulnerability in Snow Software AB Snow License Manager on Windows allows a networked attacker to perform an

CVE-2024-34515 : SPATIE IMAGE-OPTIMIZER UP TO 1.7.2 PHAR DESERIALIZATION FILE_EXISTS DESERIALIZATION

CVE-2024-34515 : SPATIE IMAGE-OPTIMIZER UP TO 1.7.2 PHAR DESERIALIZATION FILE_EXISTS DESERIALIZATION

Description image-optimizer before 1.7.3 allows PHAR deserialization, e.g., the phar:// protocol in arguments to file_exists(). References https://github.com/spatie/image-optimizer/issues/210 https://github.com/spatie/image-optimizer/compare/1.7.2…1.7.3 https://github.com/spatie/image-optimizer/pull/211 For

CVE-2024-32638 : APACHE APISIX 3.8.0/3.9.0 FORWARD-AUTH PLUGIN REQUEST SMUGGLING

CVE-2024-32638 : APACHE APISIX 3.8.0/3.9.0 FORWARD-AUTH PLUGIN REQUEST SMUGGLING

Description Inconsistent Interpretation of HTTP Requests (‘HTTP Request Smuggling’) vulnerability in Apache APISIX when using `forward-auth` plugin. This issue affects