CVE-2013-1006

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...

CVE-2013-1004

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...

CVE-2013-1001

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...

CVE-2013-1014

Apple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate...

CVE-2013-0991

CVE-2013-0991 affects WebKit as used by Apple iTunes prior to version 11.0.3. The vulnerability allows a man-in-the-middle attacker to execute arbitrary code or cause a memory corruption leading to a crash via iTunes Store browsing. Root cause is memory corruption in WebKit components, enabling p...

CVE-2013-1000

CVE-2013-1000 concerns WebKit as used by Apple iTunes prior to 11.0.3. The cited Apple security notes place CVE-2013-1000 in WebKit-related memory corruption/vulnerability fixes, associated with iTunes Store browsing. Affected component: WebKit within the iTunes integration; underlying issue: mem...

CVE-2013-0992

CVE-2013-0992 concerns WebKit as used by Apple iTunes prior to 11.0.3. The issue enables a man-in-the-middle attacker to trigger arbitrary code execution or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing. Affected software/componen...

CVE-2013-1006

CVE-2013-1006 affects WebKit as used in Apple iTunes prior to 11.0.3. The referenced description states a vulnerability in iTunes Store browsing that allows a man-in-the-middle attacker to execute arbitrary code or cause a denial of service through memory corruption and application crashes. The c...

CVE-2013-0998

CVE-2013-0998 affects WebKit as used by Apple iTunes prior to 11.0.3. The issue allows a man-in-the-middle to cause memory corruption that can lead to arbitrary code execution or a denial of service through iTunes Store browsing vectors. This is tied to WebKit inside iTunes, not a standalone prod...

CVE-2013-0998

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...

CVE-2013-1005

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...

CVE-2013-1014

Apple iTunes before 11.0.3 is affected by a certificate validation flaw: it does not properly verify X.509 certificates, allowing a man-in-the-middle to spoof HTTPS servers with an arbitrary valid certificate. The vulnerability concerns iTunes on Windows and macOS platforms; exploitation could en...

CVE-2013-1005

CVE-2013-1005 affects WebKit as used in Apple iTunes prior to 11.0.3. The issue allows a man-in-the-middle attacker to cause memory corruption and an application crash or to execute arbitrary code via iTunes Store browsing vectors, a vulnerability distinct from other WebKit CVEs related to Apple’...

CVE-2013-0995

CVE-2013-0995 affects WebKit as used by Apple iTunes prior to 11.0.3. The issue allows a man-in-the-middle attacker to trigger memory corruption in the WebKit component during iTunes Store browsing, leading to arbitrary code execution or a denial of service (application crash). The vulnerability ...

CVE-2013-0994

WebKit, as used in Apple iTunes before 11.0.3, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via vectors related to iTunes Store browsing, a different vulnerability than other WebKit CVEs listed in...

CVE-2013-1007

CVE-2013-1007 concerns WebKit as used by Apple iTunes prior to 11.0.3. The vulnerability path is tied to iTunes Store browsing and allows a man‑in‑the‑middle attacker to either execute arbitrary code or cause a denial of service through memory corruption and an application crash. The description ...

iTunes < 11.0.3 Multiple Vulnerabilities

Binary data 6831.prm...

Apple iTunes < 11.0.3 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 11.0.3. It therefore is potentially affected by several issues : - An error exists related to certificate validation that could allow disclosure of sensitive information and could allow the application to trust data fr...

Apple iTunes < 11.0.3 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 11.0.3. It is, therefore, affected by multiple vulnerabilities : - An error exists related to certificate validation. A man-in-the-middle attacker can exploit this to spoof HTTPS servers, which allows the disclosure of sensitive...

iTunes < 11.0.3 Certificate Validation Vulnerability (Mac OS X)

The version of iTunes installed on the remote Mac OS X host is earlier than 11.0.3 and is, therefore, affected by an information disclosure vulnerability related to certificate validation. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid66500; scriptversion"1.8";...