Vulnerability Bulletins

APPLE-SA-2016-05-16-6 iTunes 12.4

   
Affected software Apple
 
From: Apple Product SecurityReply to listAPPLE-SA-2016-05-16-6 iTunes 12.4iTunes 12.4 is now available and addresses the following:iTunesAvailable for: Windows 7 and laterImpact: Running the iTunes installer in an untrusted directory mayhave resulted in arbitrary code executionDescription: A dynamic library loading issue existed in iTunessetup. This was addressed through improved path searching.CVE-IDCVE-2016-1742 : Stefan Kanthak andYoKo Kho (yokoacc) of MII - Consulting & Advisory

More info:

http://prod.lists.apple.com/archives/security-announce/2016/May/msg00006.html