Apple iTunes < 12.5.1 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is prior to 12.5.1. It is, therefore, affected by multiple vulnerabilities : - A remote code execution vulnerability exists due to improper handling of error prototypes. An unauthenticated, remote attacker can exploit this, by...

CVE-2016-4763

CVE-2016-4763 affects WKWebView in WebKit across Apple platforms (iOS before 10, Safari before 10) and iTunes before 12.5.1 on Windows. Root cause: certificate validation failure in WKWebView leads to improper verification of HTTPS X.509 certificates, enabling MITM attackers to spoof servers and ...

CVE-2016-4763

WKWebView in WebKit in Apple iOS before 10, iTunes before 12.5.1 on Windows, and Safari before 10 does not properly verify X.509 certificates from HTTPS servers, which allows man-in-the-middle attackers to spoof servers and obtain sensitive information via a crafted certificate...