Download Apple iTunes 12.9.2

Apple has released version 12.9.2 of iTunes. With this program it is possible to listen to music or watch movies and TV series. These can be purchased through the Apple iTunes internet music store. The program can also burn CDs and can be used to manage an iPod, iPhone or iPad. Apple’s iTunes is available for Windows 7 and newer. Version 12.9.2 should fix several security vulnerabilities.

iTunes 12.9.2 for Windows

Safari

• Available for: Windows 7 and later
• Impact: Visiting a malicious website may lead to address bar spoofing
• Description: A logic issue was addressed with improved state management.
• CVE-2018-4440: Wenxu Wu or Tencent Security Xuanwu Lab (xlab.tencent.com)

Safari

• Available for: Windows 7 and later
• Impact: Visiting a malicious website may lead to user interface spoofing
• Description: A logic issue was addressed with improved validation.
• CVE-2018-4439: xisigr or Tencent’s Xuanwu Lab (tencent.com)

WebKit

• Available for: Windows 7 and later
• Impact: Processing maliciously crafted web content may lead to arbitrary code execution
• Description: Multiple memory corruption issues were addressed with improved memory handling.
• CVE-2018-4437: HyungSeok Han, DongHyeon Oh, and Sang Kil Cha of KAIST Softsec Lab, Korea
• CVE-2018-4464: HyungSeok Han, DongHyeon Oh, and Sang Kil Cha of KAIST Softsec Lab, Korea

WebKit

• Available for: Windows 7 and later
• Impact: Processing maliciously crafted web content may lead to arbitrary code execution
• Description: A memory corruption issue was addressed with improved memory handling.
• CVE-2018-4441: lokihardt of Google Project Zero
• CVE-2018-4442: lokihardt or Google Project Zero
• CVE-2018-4443: lokihardt of Google Project Zero

WebKit

• Available for: Windows 7 and later
• Impact: Processing maliciously crafted web content may lead to arbitrary code execution
• Description: A logic issue existed resulting in memory corruption. This was addressed with improved state management.
• CVE-2018-4438: lokihardt of Google Project Zero