CVE-2009-0143

MEDIUM 4.3CVE-2009-0143 · Published 14/03/2009 · updated 16/06/2026

In short

CVE-2009-0143 is a MEDIUM (CVSS 4.3) vulnerability affecting itunes (apple).
Chance of exploitation in the next 30 days (EPSS): 1.9%, higher than 79.5% of all vulnerabilities.
Fix: update to 8.1 or later.

Package	Affected versions	Patched versions
itunes apple	`< 8.1`	`8.1`

Description

Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to trick a user into providing a username and password when subscribing to a crafted podcast.

References

lists.apple.com/archives/security-announce//2009/Mar/msg00001.html · Mailing List
osvdb.org/52579 · Broken Link
secunia.com/advisories/34254 · Third Party Advisory
securitytracker.com/id · Third Party Advisory
support.apple.com/kb/HT3487 · Patch
securityfocus.com/bid/34094 · Third Party Advisory
vupen.com/english/advisories/2009/0702 · Third Party Advisory
exchange.xforce.ibmcloud.com/vulnerabilities/49201 · Third Party Advisory
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5336 · Third Party Advisory

More vulnerabilities in itunes

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

itunes

apple

< 8.1

8.1

More vulnerabilities in itunes

See all →