full-disclosure - [FD] APPLE-SA-2018-1-23-7 iCloud for Windows 7.3

Open Source and information security mailing list archives

Message-id: <AD4DF12E-5B0C-4C00-A095-1EA7DFF4362D@lists.apple.com>
Date: Tue, 23 Jan 2018 17:10:39 -0800
From: Apple Product Security <product-security-noreply@...ts.apple.com>
To: security-announce@...ts.apple.com
Subject: [FD] APPLE-SA-2018-1-23-7 iCloud for Windows 7.3

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

APPLE-SA-2018-1-23-7 iCloud for Windows 7.3

iCloud for Windows 7.3 is now available and addresses the following:

WebKit
Available for: Windows 7 and later
Impact: Processing maliciously crafted web content may lead to
arbitrary code execution
Description: Multiple memory corruption issues were addressed with
improved memory handling.
CVE-2018-4088: Jeonghoon Shin of Theori
CVE-2018-4096: found by OSS-Fuzz

Installation note:

iCloud for Windows 7.3 may be obtained from:
https://support.apple.com/HT204283

Information will also be posted to the Apple Security Updates
web site: https://support.apple.com/kb/HT201222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----
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=UXIo
-----END PGP SIGNATURE-----

_______________________________________________
Sent through the Full Disclosure mailing list
https://nmap.org/mailman/listinfo/fulldisclosure
Web Archives & RSS: http://seclists.org/fulldisclosure/

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives