Matthew Jurczyk

**Name of the Vulnerable Software and Affected Versions** Apple Safari versions prior to 4.0.5 Apple iTunes versions prior to 9.1 on Windows **Description** The issue allows remote attackers to obtain potentially sensitive information from process memory via a crafted TIFF image, due to the failure of ImageIO to ensure that memory access is associated with initialized memory. **Recommendations** For Apple Safari versions prior to 4.0.5, update to version 4.0.5 or later to resolve the issue. For Apple iTunes versions prior to 9.1 on Windows, update to version 9.1 or later to resolve the issue.