CoreFoundation, as used in Apple iTunes prior to 10.5, does not properly perform string tokenization, which allows man-in-the-middle malicious users to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
apple itunes 4.0.1 |
||
apple itunes 4.1.0 |
||
apple itunes 4.7.0 |
||
apple itunes 4.7.1 |
||
apple itunes 6.0.1 |
||
apple itunes 6.0.2 |
||
apple itunes 7.0.2 |
||
apple itunes 7.1.0 |
||
apple itunes 7.4.0 |
||
apple itunes 7.4.1 |
||
apple itunes 7.6.2 |
||
apple itunes 7.7 |
||
apple itunes 8.1.1 |
||
apple itunes 8.2 |
||
apple itunes 9.2.1 |
||
apple itunes 10.0 |
||
apple itunes |
||
apple itunes 10.4 |
||
apple itunes 4.5.0 |
||
apple itunes 4.6 |
||
apple itunes 4.9.0 |
||
apple itunes 5.0 |
||
apple itunes 6.0.5 |
||
apple itunes 6.0.4.2 |
||
apple itunes 7.3.0 |
||
apple itunes 7.3.1 |
||
apple itunes 7.5 |
||
apple itunes 7.5.0 |
||
apple itunes 8.0.0 |
||
apple itunes 8.0.1 |
||
apple itunes 9.0.1 |
||
apple itunes 9.0.2 |
||
apple itunes 10.1.1 |
||
apple itunes 10.1.2 |
||
apple itunes 10.2 |
||
apple itunes 4.2.0 |
||
apple itunes 4.5 |
||
apple itunes 4.7.2 |
||
apple itunes 4.8.0 |
||
apple itunes 6.0.3 |
||
apple itunes 6.0.4 |
||
apple itunes 7.1.1 |
||
apple itunes 7.2.0 |
||
apple itunes 7.4.2 |
||
apple itunes 7.4.3 |
||
apple itunes 7.7.0 |
||
apple itunes 7.7.1 |
||
apple itunes 8.2.1 |
||
apple itunes 9.0.0 |
||
apple itunes 10.0.1 |
||
apple itunes 10.1 |
||
apple itunes 4.0.0 |
||
apple itunes 4.6.0 |
||
apple itunes 4.7 |
||
apple itunes 5.0.0 |
||
apple itunes 5.0.1 |
||
apple itunes 6.0.0 |
||
apple itunes 7.0.0 |
||
apple itunes 7.0.1 |
||
apple itunes 7.3.2 |
||
apple itunes 7.4 |
||
apple itunes 7.6 |
||
apple itunes 7.6.0 |
||
apple itunes 7.6.1 |
||
apple itunes 8.0.2 |
||
apple itunes 8.1 |
||
apple itunes 9.0.3 |
||
apple itunes 9.2 |
||
apple itunes 10.3 |
||
apple itunes 10.3.1 |
Vulmon