CERT-In Warning: Indian Computer Emergency Response Team Under MeitY Finds Vulnerabilities in Apple iTunes, Google Chrome; Check More Details
In addition, the cyber agency said that the reported vulnerabilities exist in Google Chrome due to use-after-free errors in Visuals & ANGLE components; and heap buffer overflow in WebAudio.
New Delhi, May 11: The Indian Computer Emergency Response Team (CERT-In), which comes under the Ministry of Electronics & Information Technology, has warned users of vulnerabilities in Apple iTunes and Google Chrome for desktop which could allow an attacker to execute arbitrary code on the targeted system.
The affected software includes Apple iTunes versions prior to 12.13.2 for Windows. For Chrome for Desktop, the affected software includes -- versions prior to 124.0.6367.201/.202 (for Windows and Mac) and versions before 124.0.6367.201 (for Linux). WhatsApp New Privacy Update: Meta-Owned App Working on Feature To Restrict Users From Taking Profile Picture’s Screenshots on iOS.
"A vulnerability has been reported in Apple iTunes which could be exploited by a remote attacker to execute arbitrary code on the targeted system," said the CERT-In advisory. The 'Remote Code Execution' vulnerability exists in the Apple Product due to improper checks in the CoreMedia component. A remote attacker could exploit this vulnerability by sending a specially crafted request, the advisory mentioned.
In addition, the cyber agency said that the reported vulnerabilities exist in Google Chrome due to use-after-free errors in Visuals & ANGLE components; and heap buffer overflow in WebAudio. "A remote attacker could exploit these vulnerabilities by executing a specially crafted HTML page to trigger heap corruption," CERT-In noted. X Account Ban: Elon Musk’s Social Platform Banned Over 1.8 Lakh Accounts in India Between March 26 and April 25 for Promoting Child Sexual Exploitation and Non-Consensual Nudity.
"Successful exploitation of these vulnerabilities could allow the remote attacker to compromise the targeted system," it added. The agency also suggested users to apply appropriate security updates as mentioned by the companies.
(The above story first appeared on LatestLY on May 11, 2024 04:02 PM IST. For more news and updates on politics, world, sports, entertainment and lifestyle, log on to our website latestly.com).