Posté par: igor51 le octobre 15, 2019, 16:00:04
The flaw is a rare ‘unquoted path class’ described as "so thoroughly documented that you would expect programmers to be well aware..." But that's not the case.
Source: Update now! Windows users targeted by iTunes Software Updater zero-day (http://feedproxy.google.com/~r/nakedsecurity/~3/PLucYEnVB5k/)