Recently modified vulnerabilities for "itunes" 6.0.1 - SecAlerts

Where

AND

Sort:

Recently updated

Recently published

-Infinity

0

Trending

CVE-2008-3634Infoleak

Risk 15

Severity

2.6

Infoleak

AV:N/AC:H/Au:N/C:P/I:N/A:N

Apple iTunes before 8.0 on Mac OS X 10.4.11, when iTunes Music Sharing is enabled but blocked by the host-based firewall, presents misleading information about firewall security, which might allow remote attackers to leverage an exposure that would be absent if the administrator were given better information.

First published (updated )

Apple iTunesInteger Overflow

Risk 63

Severity

7.2

Integer Overflow

AV:L/AC:L/Au:N/C:C/I:C/A:C

Integer overflow in the IopfCompleteRequest API in the kernel in Microsoft Windows 2000, XP, Server 2003, and Vista allows context-dependent attackers to gain privileges. NOTE: this issue was originally reported for GEARAspiWDM.sys 2.0.7.5 in Gear Software CD DVD Filter driver before 4.001.7, as used in other products including Apple iTunes and multiple Symantec and Norton products, which allows local users to gain privileges via repeated IoAttachDevice IOCTL calls to \\.\GEARAspiWDMDevice in this GEARAspiWDM.sys. However, the root cause is the integer overflow in the API call itself.

First published (updated )

Apple iTunesCode Injection

Risk 52

Severity

7.5

Code Injection

AV:N/AC:L/Au:N/C:P/I:P/A:P

Apple iTunes before 10.5.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.

First published (updated )

Apple iTunesBuffer Overflow

Risk 79

Severity

9.3

Buffer Overflow

AV:N/AC:M/Au:N/C:C/I:C/A:C

Buffer overflow in Apple iTunes before 9.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .pls file.

First published (updated )

Apple iTunesBuffer Overflow

Risk 80

Severity

9.3

Buffer Overflow

AV:N/AC:M/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon.

First published (updated )

Apple iTunesBuffer Overflow

Risk 79

Severity

9.3

Buffer Overflow

AV:N/AC:M/Au:N/C:C/I:C/A:C

Buffer overflow in Apple iTunes before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted itpc: URL.

First published (updated )

Apple iTunesUnspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges v…

Risk 59

Severity

6.9

AV:L/AC:M/Au:N/C:C/I:C/A:C

Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file operation," and syncing an iPhone, iPad, or iPod touch.

First published (updated )

Apple iTunesUntrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, an…

Risk 79

Severity

9.3

AV:N/AC:M/Au:N/C:C/I:C/A:C

Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote attackers to gain privileges via a Trojan horse DLL in the current working directory.

First published (updated )

Apple iTunesUse After Free

Risk 79

Severity

9.3

Use After Free

AV:N/AC:M/Au:N/C:C/I:C/A:C

Use-after-free vulnerability in JavaScriptCore in WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via vectors related to page transitions, a different vulnerability than CVE-2010-1763 and CVE-2010-1769.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

First published (updated )

Apple iTunesBuffer Overflow

Risk 79

Severity

9.3

Buffer Overflow

AV:N/AC:M/Au:N/C:C/I:C/A:C

Buffer overflow in CoreAudio, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted Advanced Audio Coding (AAC) stream.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

First published (updated )

Apple iTunesBuffer Overflow

Risk 79

Severity

9.3

Buffer Overflow

AV:N/AC:M/Au:N/C:C/I:C/A:C

Buffer overflow in CoreMedia, as used in Apple iTunes before 10.5, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with H.264 encoding.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

First published (updated )

Apple iTunesBuffer Overflow

Risk 67

Severity

7.6

Buffer Overflow

AV:N/AC:H/Au:N/C:C/I:C/A:C

WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2011-10-11-1.

First published (updated )

Company

Resources

Contact

SecAlerts Pty Ltd.
132 Wickham Terrace
Fortitude Valley,
QLD 4006, Australia
info@secalerts.co

By using SecAlerts services, you agree to our services end-user license agreement. This website is safeguarded by reCAPTCHA and governed by the Google Privacy Policy and Terms of Service. All names, logos, and brands of products are owned by their respective owners, and any usage of these names, logos, and brands for identification purposes only does not imply endorsement. If you possess any content that requires removal, please get in touch with us.

© 2026 SecAlerts Pty Ltd.
ABN: 70 645 966 203, ACN: 645 966 203