Apple iTunes Remote Code Execution Vulnerability (Windows)

This host is installed with Apple iTunes and is prone to remote code execution vulnerability. OpenVAS Vulnerability Test $Id: secpodappleitunesremotecodeexecvulnwin.nasl 8169 2017-12-19 08:42:31Z cfischer $ Apple iTunes Remote Code Execution Vulnerability Windows Authors: Rachana Shetty Copyright...

Apple iTunes < 10.5.1 Update Authenticity Verification Weakness (credentialed check)

The version of Apple iTunes installed on the remote Mac OS X host is earlier than 10.5.1. As such, it uses an unsecured HTTP connection when checking for or retrieving software updates, which could allow a man-in-the-middle attacker to provide a Trojan horse update that appears to originate from...

iTunes < 10.5.1 Update Authenticity Verification Weakness (Mac OS X)

The version of iTunes installed on the remote Mac OS X host is earlier than 10.5.1. As such, it uses an unsecured HTTP connection when checking for or retrieving software updates, which could allow a man-in-the-middle attacker to provide a Trojan horse update that appears to originate from Apple....

Apple iTunes < 10.5.1 Update Authenticity Verification Weakness (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 10.5.1. It is, therefore, affected by a man-in-the-middle vulnerability due to using unsecured HTTP connections when checking for or retrieving software updates. A remote attacker can exploit this to execute arbitrary code by mean...

iTunes < 10.5.1 Update Authenticity Verification Weakness

Binary data 6098.prm...

Apple iTunes insecure updates

Software updtes were checked insecurely...

APPLE-SA-2011-11-14-1 iTunes 10.5.1

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-11-14-1 iTunes 10.5.1 iTunes 10.5.1 is now available and addresses the following: iTunes Available for: Mac OS X v10.5 or later, Windows 7, Vista, XP SP2 or later Impact: A man-in-the-middle attacker may offer software that appears to...

Apple iTunes 10.x软件更新伪造漏洞

CVE ID：CVE-2008-3434 Apple iTunes是一款用于Mac和PC的一款免费应用程序。它可以播放你的全部音乐和视频内容。 Apple iTunes存在一个安全漏洞，允许恶意用户进行伪造攻击。 使用HTTP请求检查新的更新时软件升级机制存在缺陷，攻击者可以利用漏洞通过中间人攻击伪造更新。 要成功利用漏洞需要目标系统没有安装Apple Software Update。 Apple iTunes 10.x 厂商解决方案 Apple iTunes 10.5.1已经修复此漏洞，建议用户下载使用： http://www.apple.com...

Apple Fixes Man-in-the-Middle Bug in iTunes

Apple has issued a fix for a flaw in iTunes that could enable an attacker to perform man-in-the-middle attacks against users. The vulnerability is fixed in iTunes 10.5.1. The bug in iTunes relates to the way that the application communicates with the iTunes server when it’s checking for updates t...

Apple Releases iTunes 10.5.1

Apple has released iTunes 10.5.1 to address a vulnerability. This vulnerability may allow an attacker to conduct a man-in-the-middle attack that could lead a user to click on a forged link believed to have originated from Apple. US-CERT encourages users and administrators to review Apple article...

Demo of Charlie Miller's iOS Code-Signing Bug

Security researcher Charlie Miller of Accuvant discovered a vulnerability in the Apple iOS software that enables him to use an app he placed in the iTunes App Store to download unsigned code from a remote Web server and run it on any iOS device. In this video, he demonstrates the app and the way...

Apple iTunes Client Detection

Binary data 6051.prm...

Apple iTunes CoreAudio缓冲区溢出漏洞

BUGTRAQ ID: 50065 CVE ID: CVE-2011-3252 iTunes是一款媒体播放器的应用程序，2001年1月10日由苹果电脑在旧金山的Macworld Expo推出，用来播放以及管理数字音乐和与视频文件，是管理苹果iPod的文件的主要工具。 Apple iTunes在实现上存在缓冲区溢出漏洞，远程攻击者可利用此漏洞执行任意代码，可能造成拒绝服务。 此漏洞源于应用解析高级音频解码器编码的音频流的方式，会读取文件中的字段以计算长度，稍后会用在内存复制到静态缓冲区操作中。 Apple iTunes 10.x 厂商补丁： Apple -----...

Apple iTunes Multiple Vulnerabilities - Oct 11

This host is installed with Apple iTunes and is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbappleitunesmultvulnoct11win.nasl 8169 2017-12-19 08:42:31Z cfischer $ Apple iTunes Multiple Vulnerabilities - Oct 11 Authors: Madhuri D Copyright: Copyright c 2011 Greenbone Networ...

Apple iTunes Multiple Vulnerabilities (Oct 2011)

Apple iTunes is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...

Attorney General: Massachusetts Won't Investigate iTunes Fraud

It looks as if Apple iTunes users who have been the victim of identity theft will have to look for a new knight in shining armor to wring answers from the notoriously close-lipped Cupertino technology giant. The Massachusetts Attorney General’s Office said on Monday that it isn’t planning to...

Apple iTunes multiple security vulnerabilities

Multiple security vulnerabilities on different media formats parsing...

APPLE-SA-2011-10-11-1 iTunes 10.5

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2011-10-11-1 iTunes 10.5 iTunes 10.5 is now available and addresses the following: CoreFoundation Available for: Windows 7, Vista, XP SP2 or later Impact: A man-in-the-middle attack may lead to an unexpected application termination or arbitra...

It's Time For an Apple Patch Tuesday

If there’s one thing that can be said about Apple, it’s that the company operates on its own timeline. It does what it pleases at whatever time suits it, and the customers appear. Actually, they don’t simply appear, they wait expectantly and move as one when asked. This has proven to be enormousl...

Apple Ships Mammoth Security Update for OS X

Apple released OS X Lion v10.7.2 yesterday along with an absolutely enormous security update that patches some 80 bugs in the various iterations of Apple’s operating system. One of the patches fixes a highly critical vulnerability that enables an attacker to run code on a remote machine with a...