Apple iTunes < 12.5.1 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.5.1. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper handling of error prototypes. An unauthenticated, remote attacker can exploit this, by...

CVE-2016-4760

CVE-2016-4760 concerns WebKit in Apple iOS (pre-10), iTunes for Windows (pre-12.5.1), and Safari (pre-10). The vulnerability allows remote attackers to perform DNS rebinding against non-HTTP Safari sessions by exploiting HTTP/0.9 support. Public references indicate multiple WebKit-related CVEs ar...

CVE-2016-4760

WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 allows remote attackers to conduct DNS rebinding attacks against non-HTTP Safari sessions by leveraging HTTP/0.9 support...