Apple TV < 6.1.2 Multiple Vulnerabilities

Binary data 8323.prm...

CVE-2014-1383

Apple TV prior to 6.1.2 contains CVE-2014-1383 in the iTunes Store purchase flow, allowing remote authenticated users to bypass the password requirement for transactions. The underlying issue is insufficient authorization handling in the purchase flow, enabling potentially unauthorized purchases....