Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple itunes 4.9 vulnerabilities and exploits

(subscribe to this query)
7.5
CVSSv2
CVE-2008-3434
Apple iTunes prior to 10.5.1 does not properly verify the authenticity of updates, which allows man-in-the-middle malicious users to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
Apple Itunes 1.1.2Apple Itunes 2.0Apple Itunes 4.0Apple Itunes 4.0.1Apple Itunes 4.9Apple Itunes 5.0Apple Itunes 6.0.4.2Apple ItunesApple Itunes 2.0.1Apple Itunes 2.0.2Apple Itunes 4.1Apple Itunes 4.2Apple Itunes 5.0.1Apple Itunes 6.0Apple Itunes 1.0Apple Itunes 2.0.3Apple Itunes 2.0.4Apple Itunes 4.5Apple Itunes 4.6Apple Itunes 6.0.1Apple Itunes 6.0.2Apple Itunes 1.1
2.6
CVSSv2
CVE-2008-3634
Apple iTunes prior to 8.0 on Mac OS X 10.4.11, when iTunes Music Sharing is enabled but blocked by the host-based firewall, presents misleading information about firewall security, which might allow remote malicious users to leverage an exposure that would be absent if the admini...
Apple Itunes 2.0.2Apple Itunes 2.0.3Apple Itunes 4.0.1Apple ItunesApple Itunes 7.0.2Apple Itunes 1.1Apple Itunes 1.0Apple Itunes 4.2.72Apple Itunes 7.7Apple Itunes 6.0.3Apple Itunes 6.0Apple Itunes 2.0Apple Itunes 2.0.1Apple Itunes 5.0.1Apple Itunes 4.2Apple Itunes 4.8Apple Itunes 6.0.1Apple Itunes 6.0.2Apple Itunes 7.4Apple Itunes 7.4.1Apple Itunes 7.4.2Apple Itunes 7.4.3
7.2
CVSSv2
CVE-2008-3636
Integer overflow in the IopfCompleteRequest API in the kernel in Microsoft Windows 2000, XP, Server 2003, and Vista allows context-dependent malicious users to gain privileges. NOTE: this issue was originally reported for GEARAspiWDM.sys 2.0.7.5 in Gear Software CD DVD Filter dri...
Apple Itunes 2.0.2Apple Itunes 2.0.3Apple Itunes 4.2Apple Itunes 4.2.72Apple Itunes 4.9Apple Itunes 5.0Apple Itunes 6.0.5Apple Itunes 7.0.2Apple Itunes 7.6Apple Itunes 7.6.2Apple Itunes 2.0Apple Itunes 2.0.1Apple Itunes 4.0.1Apple Itunes 4.1Apple Itunes 4.7.1.30Apple Itunes 4.8Apple Itunes 6.0.4Apple Itunes 6.0.4.2Apple Itunes 7.4.3Apple Itunes 7.5Apple Itunes 1.0Apple Itunes 1.1.2
5
CVSSv2
CVE-2009-0016
Apple iTunes prior to 8.1 on Windows allows remote malicious users to cause a denial of service (infinite loop) via a Digital Audio Access Protocol (DAAP) message with a crafted Content-Length header.
Apple Itunes 2.0.2Apple Itunes 2.0.3Apple Itunes 4.0.1Apple Itunes 4.2.0Apple Itunes 4.1Apple Itunes 4.6.0Apple Itunes 4.6Apple Itunes 4.7.1Apple Itunes 4.9Apple Itunes 6.0.1Apple Itunes 6.0.2Apple Itunes 6.0.5Apple Itunes 7.1.0Apple Itunes 2.0.4Apple Itunes 2.0Apple Itunes 4.1.0Apple Itunes 4.0Apple Itunes 4.7.0Apple Itunes 4.7.1.30Apple Itunes 4.9.0Apple Itunes 5.0.0Apple Itunes 6.0.3
9.3
CVSSv2
CVE-2009-0950
Stack-based buffer overflow in Apple iTunes prior to 8.2 allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon.
Apple Itunes 1.0Apple Itunes 1.1.1Apple Itunes 1.1.2Apple Itunes 2.0.1Apple Itunes 2.0.2Apple Itunes 2.0.3Apple Itunes 2.0.4Apple Itunes 3.0Apple Itunes 3.0.1Apple Itunes 4.0.1Apple Itunes 4.1Apple Itunes 4.2Apple Itunes 4.5Apple Itunes 4.5.0Apple Itunes 4.6Apple Itunes 4.7Apple Itunes 4.7.1Apple Itunes 4.8.0Apple Itunes 4.8Apple Itunes 4.9Apple Itunes 5.0.0Apple Itunes 6.0.0
9.3
CVSSv2
CVE-2009-2817
Buffer overflow in Apple iTunes prior to 9.0.1 allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via a crafted .pls file.
Apple Itunes 2.0.3Apple Itunes 2.0.2Apple Itunes 4.0.1Apple Itunes 4.5.0Apple Itunes 4.1.0Apple Itunes 4.7.0Apple Itunes 6.0.4Apple Itunes 6.0.3Apple Itunes 7.3.2Apple Itunes 7.1.1Apple Itunes 7.6.2Apple Itunes 7.7.0Apple Itunes 1.1.2Apple Itunes 3.0.1Apple Itunes 4.2.72Apple Itunes 4.6.0Apple Itunes 4.7Apple Itunes 6.0.2Apple Itunes 6.0.4.2Apple Itunes 7.0.2Apple Itunes 7.3.1Apple Itunes 7.5.0
CVSSv2
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2022-48654CVE-2024-2757authentication bypassCVE-2024-3194CVE-2024-33640CVE-2024-21111dosinsecure direct object referenceCVE-2024-21345
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook