Lucene search
HistoryNov 18, 2005 - 6:03 a.m.
CVE-2005-2938
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Unquoted Windows search path vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows might allow local users to gain privileges via a malicious C:\program.exe file.
Affected configurations
Node
appleitunesMatch4.7.1.30
ORappleitunesMatch5.0windows
Related
cve
cve
CVE-2005-2938
2005-11-18 11:00:00
nessus
nessus
securityvulns
securityvulns
APPLE-SA-2005-11-15 iTunes 6 for Windows
2005-11-16 00:00:00
cvelist
cvelist
CVE-2005-2938
2005-11-18 11:00:00
7.2 High
CVSS2
Attack Vector
LOCAL
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
COMPLETE
Integrity Impact
COMPLETE
Availability Impact
COMPLETE
AV:L/AC:L/Au:N/C:C/I:C/A:C
6.5 Medium
AI Score
Confidence
Low
0.0004 Low
EPSS
Percentile
5.1%
Related for NVD:CVE-2005-2938