KLA12053 Multiple vulnerabilities in Apple iCloud

Multiple vulnerabilities were found in Apple iCloud. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code.

Below is a complete list of vulnerabilities:

1. An out-of-bounds read vulnerability in ImageIO can be exploited via special crafted imae to cause denial of service.
2. An out-of-bounds write vulnerability in ImageIO can be exploited via special crafted image to execute arbitrary code.
3. An out-of-bounds read vulnerability in ImageIO can be exploited via special crafted image to execute arbitrary code.

Original advisories

About the security content of iCloud for Windows 12.0

Related products

Apple-iCloud

CVE list

CVE-2020-29617 critical

CVE-2020-29619 critical

CVE-2020-29611 critical

CVE-2020-29618 critical

Solution

Update to the latest version

Download iCloud

Impacts

• ACE

Arbitrary code execution. Exploitation of vulnerabilities with this impact can lead to executing by abuser any code or commands at vulnerable machine or process.

• DoS

Denial of service. Exploitation of vulnerabilities with this impact can lead to loss of system availability or critical functional fault.

• SB

Security bypass. Exploitation of vulnerabilities with this impact can lead to performing actions restricted by current security settings.

Affected Products

• Aple iCloud for Windows earlier than 12.0