Apple iTunes prior to 11.1.4 uses HTTP for the iTunes Tutorials window, which allows man-in-the-middle malicious users to spoof content by gaining control over the client-server data stream.
Vulnerable Product | Search on Vulmon | Subscribe to Product |
---|---|---|
apple itunes 11.0.4 |
||
apple itunes 11.0.5 |
||
apple itunes 11.1.1 |
||
apple itunes 11.0 |
||
apple itunes 11.0.1 |
||
apple itunes 11.0.2 |
||
apple itunes 11.0.3 |
||
apple itunes |
||
apple itunes 11.1.2 |
||
apple itunes 11.1 |