CVE-2017-7079

Published: Oct 23, 2017Modified: May 13, 2026

5.5

Vector

CVSS:3.0/AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Exploitability: 1.8 / Impact: 3.6

Source: NVD

Description

An issue was discovered in certain Apple products. iTunes before 12.7 is affected. The issue involves the "Data Sync" component. It allows attackers to access iOS backups (written by iTunes) via a crafted app.

Affected (1)

Products: Apple: Itunes

Apple

1 product

Itunes

Configuration A

1 vulnerable

Vulnerable Software	Affected Versions
Apple Itunes	Up to 12.6.2

Related CWEs

CWE-552

Files or Directories Accessible to External Parties

The product makes files or directories accessible to unauthorized actors, even though they should not be.

References (4)

http://www.securityfocus.com/bid/100983

Source: product-security@apple.com

Third Party AdvisoryVDB Entry

https://support.apple.com/HT208140

Source: product-security@apple.com

Vendor Advisory

http://www.securityfocus.com/bid/100983

Source: af854a3a-2127-422b-91ae-364da2661108

Third Party AdvisoryVDB Entry

https://support.apple.com/HT208140

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

Timeline

No history available yet.