The Computer Emergency Response Team (CERT) under the Government of India has issued a warning about vulnerabilities in iTunes and Google Chrome desktop applications. The agency says these vulnerabilities could allow hackers to remotely access a user's device and execute arbitrary code.
CERT Warning for Apple iTunes:
CERT said the vulnerability in Apple iTunes exists due to improper checks in a component called 'CoreMedia', which can be exploited by hackers by sending specially crafted requests. This vulnerability affects users of Apple iTunes on Windows before version 12.13.2.
Explaining the issue through a report, CERT said, “This vulnerability exists in an Apple product due to improper checking in the CoreMedia component. A remote attacker could exploit this vulnerability by sending a specially crafted request. Successful exploitation of this vulnerability could allow a remote attacker to execute arbitrary code on the targeted system.”
How can Apple iTunes users protect themselves from this vulnerability?
CERT says updating to the latest version of iTunes will help mitigate potential vulnerabilities. To update your iTunes application on Windows, users can go to the Help section and click on Check for Updates.
CERT warning for Google Chrome users:
CERT has found several vulnerabilities in Google Chrome that a potential hacker could exploit to gain access to a targeted system. The vulnerabilities in Chrome exist due to a bug in the visuals and angle components, called 'use-after-free' and can be used by hackers to execute a specially crafted HTML page to cause 'heap corruption'. Can be done for.
CERT also said that 'the vulnerability under CVE-2024-4671 is being exploited wildly. Users are advised to patch vulnerable devices immediately.
The vulnerabilities affect Google Chrome users on desktop before version 124.0.6367.201/.202 for Windows and Mac and version 124.0.6367.201 for Linux.
How can Google Chrome users protect themselves from this new vulnerability?
Google Chrome users on Windows, Mac, and Linux are advised to update to the latest version to mitigate potential vulnerabilities. To update to the latest version, users can go to the 'Help' option and click on 'About Google Chrome', which will automatically search for a newer version.
Unlock a world of benefits! From informative newsletters to real-time stock tracking, breaking news and personalized newsfeeds – it's all here, just a click away! log in now!
Check out all the technology news and updates on Live Mint. Download Mint News app to get daily market updates and live business news.
more less
Published: May 12, 2024, 12:22 pm IST