Vulmon Recent Vulnerabilities Research Posts Trends Blog About Contact

apple itunes 6.0.4.2 vulnerabilities and exploits

(subscribe to this query)
668
VMScore
CVE-2008-3434
Apple iTunes prior to 10.5.1 does not properly verify the authenticity of updates, which allows man-in-the-middle malicious users to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
Apple Itunes 1.1.2Apple Itunes 2.0Apple Itunes 4.0Apple Itunes 4.0.1Apple Itunes 4.9Apple Itunes 5.0Apple Itunes 6.0.4.2Apple ItunesApple Itunes 2.0.1Apple Itunes 2.0.2Apple Itunes 4.1Apple Itunes 4.2Apple Itunes 5.0.1Apple Itunes 6.0Apple Itunes 1.0Apple Itunes 2.0.3Apple Itunes 2.0.4Apple Itunes 4.5Apple Itunes 4.6Apple Itunes 6.0.1Apple Itunes 6.0.2Apple Itunes 1.1
231
VMScore
CVE-2008-3634
Apple iTunes prior to 8.0 on Mac OS X 10.4.11, when iTunes Music Sharing is enabled but blocked by the host-based firewall, presents misleading information about firewall security, which might allow remote malicious users to leverage an exposure that would be absent if the admini...
Apple Itunes 2.0.2Apple Itunes 2.0.3Apple Itunes 4.0.1Apple ItunesApple Itunes 7.0.2Apple Itunes 1.1Apple Itunes 1.0Apple Itunes 4.2.72Apple Itunes 7.7Apple Itunes 6.0.3Apple Itunes 6.0Apple Itunes 2.0Apple Itunes 2.0.1Apple Itunes 5.0.1Apple Itunes 4.2Apple Itunes 4.8Apple Itunes 6.0.1Apple Itunes 6.0.2Apple Itunes 7.4Apple Itunes 7.4.1Apple Itunes 7.4.2Apple Itunes 7.4.3
641
VMScore
CVE-2008-3636
Integer overflow in the IopfCompleteRequest API in the kernel in Microsoft Windows 2000, XP, Server 2003, and Vista allows context-dependent malicious users to gain privileges. NOTE: this issue was originally reported for GEARAspiWDM.sys 2.0.7.5 in Gear Software CD DVD Filter dri...
Apple Itunes 2.0.2Apple Itunes 2.0.3Apple Itunes 4.2Apple Itunes 4.2.72Apple Itunes 4.9Apple Itunes 5.0Apple Itunes 6.0.5Apple Itunes 7.0.2Apple Itunes 7.6Apple Itunes 7.6.2Apple Itunes 2.0Apple Itunes 2.0.1Apple Itunes 4.0.1Apple Itunes 4.1Apple Itunes 4.7.1.30Apple Itunes 4.8Apple Itunes 6.0.4Apple Itunes 6.0.4.2Apple Itunes 7.4.3Apple Itunes 7.5Apple Itunes 1.0Apple Itunes 1.1.2
614
VMScore
CVE-2010-1768
Unspecified vulnerability in Apple iTunes prior to 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file operation," and syncing an iPhone, iPad, or iPod touch.
Apple Itunes 8.1Apple Itunes 8.0.2Apple Itunes 7.6.0Apple Itunes 7.5.0Apple Itunes 7.3.0Apple Itunes 7.2.0Apple Itunes 7.1.1Apple Itunes 6.0.4Apple Itunes 9.0.0Apple Itunes 8.2.1Apple Itunes 7.7.1Apple Itunes 7.7.0Apple Itunes 7.4.1Apple Itunes 7.4.0Apple Itunes 7.0.1Apple Itunes 7.0.0Apple Itunes 6.0.0Apple Itunes 5.0.1Apple Itunes 4.5.0Apple Itunes 4.2.0Apple Itunes 2.0.2Apple Itunes 2.0.1
828
VMScore
CVE-2010-1795
Untrusted search path vulnerability in Apple iTunes prior to 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote malicious users to gain privileges via a Trojan horse DLL in the current working directory.
Apple Itunes 9.0.3Apple Itunes 9.0.2Apple Itunes 8.0.2Apple Itunes 8.0.1Apple Itunes 8.0Apple Itunes 7.4.3Apple Itunes 7.4.2Apple Itunes 7.1.1Apple Itunes 7.1.0Apple Itunes 6.0.3Apple Itunes 6.0.2Apple Itunes 6.0.1Apple Itunes 4.7.0Apple Itunes 4.6.0Apple Itunes 3.0.0Apple Itunes 2.0.4Apple Itunes 9.0.1Apple Itunes 9.0.0Apple Itunes 7.7.1Apple Itunes 7.7.0Apple Itunes 7.4.1Apple Itunes 7.4.0
676
VMScore
CVE-2011-0115
The DOM level 2 implementation in WebKit, as used in Apple iTunes prior to 10.2 on Windows and Apple Safari, does not properly handle DOM manipulations associated with event listeners during processing of range objects, which allows man-in-the-middle malicious users to execute ar...
Apple Itunes 4.5.0Apple Itunes 4.6Apple Itunes 4.9.0Apple Itunes 5.0Apple Itunes 5.0.0Apple Itunes 6.0.5Apple Itunes 6.0.4.2Apple Itunes 7.3.0Apple Itunes 7.3.1Apple Itunes 7.5.0Apple Itunes 7.6Apple Itunes 8.0.0Apple Itunes 8.0.1Apple Itunes 9.0.1Apple Itunes 9.0.2Apple ItunesApple WebkitApple Itunes 4.0.0Apple Itunes 4.6.0Apple Itunes 4.7Apple Itunes 5.0.1Apple Itunes 6.0.0
676
VMScore
CVE-2011-0132
Use-after-free vulnerability in the Runin box functionality in the Cascading Style Sheets (CSS) 2.1 Visual Formatting Model implementation in WebKit, as used in Apple iTunes prior to 10.2 on Windows and Apple Safari, allows man-in-the-middle malicious users to execute arbitrary c...
Apple Itunes 4.5.0Apple Itunes 4.6Apple Itunes 4.6.0Apple Itunes 5.0Apple Itunes 5.0.0Apple Itunes 6.0.5Apple Itunes 6.0.4.2Apple Itunes 7.3.1Apple Itunes 7.3.2Apple Itunes 7.5.0Apple Itunes 7.6Apple Itunes 8.0.0Apple Itunes 8.0.1Apple Itunes 9.0.2Apple Itunes 9.0.3Apple ItunesApple WebkitApple Itunes 4.2.0Apple Itunes 4.5Apple Itunes 4.8.0Apple Itunes 4.9.0Apple Itunes 6.0.3
676
VMScore
CVE-2011-0126
WebKit, as used in Apple iTunes prior to 10.2 on Windows, allows man-in-the-middle malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other C...
Apple Itunes 4.6Apple Itunes 4.6.0Apple Itunes 5.0Apple Itunes 5.0.0Apple Itunes 6.0.4.2Apple Itunes 7.0.0Apple Itunes 7.3.1Apple Itunes 7.3.2Apple Itunes 7.5.0Apple Itunes 7.6Apple Itunes 8.0.1Apple Itunes 8.0.2Apple Itunes 9.0.2Apple Itunes 9.0.3Apple ItunesApple WebkitApple Itunes 4.5Apple Itunes 4.5.0Apple Itunes 4.8.0Apple Itunes 4.9.0Apple Itunes 6.0.3Apple Itunes 6.0.4
676
VMScore
CVE-2011-0155
WebKit, as used in Apple iTunes prior to 10.2 on Windows, allows man-in-the-middle malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other C...
Apple Itunes 4.0.0Apple Itunes 4.6.0Apple Itunes 4.7Apple Itunes 5.0.0Apple Itunes 5.0.1Apple Itunes 6.0.4.2Apple Itunes 7.0.0Apple Itunes 7.0.1Apple Itunes 7.3.2Apple Itunes 7.4Apple Itunes 7.6Apple Itunes 7.6.0Apple Itunes 8.0.2Apple Itunes 8.1Apple Itunes 9.0.3Apple Itunes 9.2Apple WebkitApple Itunes 4.5.0Apple Itunes 4.6Apple Itunes 4.9.0Apple Itunes 5.0Apple Itunes 6.0.4
676
VMScore
CVE-2011-0165
WebKit, as used in Apple iTunes prior to 10.2 on Windows, allows man-in-the-middle malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other C...
Apple Itunes 4.5.0Apple Itunes 4.6Apple Itunes 4.9.0Apple Itunes 5.0Apple Itunes 6.0.5Apple Itunes 6.0.4.2Apple Itunes 7.3.0Apple Itunes 7.3.1Apple Itunes 7.5Apple Itunes 7.5.0Apple Itunes 8.0.0Apple Itunes 8.0.1Apple Itunes 9.0.1Apple Itunes 9.0.2Apple Itunes 10.1.1Apple ItunesApple Itunes 4.0.0Apple Itunes 4.6.0Apple Itunes 4.7Apple Itunes 5.0.0Apple Itunes 5.0.1Apple Itunes 7.0.0
VMScore
CVSSv2
CVSSv3
VMScore
Recommendations:
CVE-2006-4304CVE-2024-4240arbitrary CVE-2024-31601XSSCVE-2023-20198CVE-2024-4256CVE-2024-3342encryption
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started

Vulmon Search

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

About

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Products

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Connect

Twitter Reddit Linkedin Facebook