CVE-2013-1002: Critical severity Apple iTunes vulnerability
WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in APPLE-SA-2013-05-16-1.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1002?
CVE-2013-1002 has a high severity rating due to its potential for exploitation by man-in-the-middle attackers allowing arbitrary code execution.
How do I fix CVE-2013-1002?
To fix CVE-2013-1002, upgrade Apple iTunes to version 11.0.3 or later.
What versions of Apple iTunes are affected by CVE-2013-1002?
CVE-2013-1002 affects all Apple iTunes versions prior to 11.0.3.
Can CVE-2013-1002 cause a denial of service?
Yes, CVE-2013-1002 can lead to a denial of service by causing memory corruption and application crashes.
What types of attacks can CVE-2013-1002 facilitate?
CVE-2013-1002 can facilitate man-in-the-middle attacks allowing attackers to execute arbitrary code.