| Package | Affected versions | Patched versions |
|---|---|---|
| itunes | = 10.0= 10.0.1= 10.1= 10.1.1= 10.1.2= 10.2= 10.3= 10.3.1= 10.4= 4.0.0= 4.0.1= 4.1.0= 4.2.0= 4.5= 4.5.0= 4.6= 4.6.0= 4.7= 4.7.0= 4.7.1= 4.7.2= 4.8.0= 4.9.0= 5.0= 5.0.0= 5.0.1= 6.0.0= 6.0.1= 6.0.2= 6.0.3= 6.0.4= 6.0.4.2= 6.0.5= 7.0.0= 7.0.1= 7.0.2= 7.1.0= 7.1.1= 7.2.0= 7.3.0= 7.3.1= 7.3.2= 7.4= 7.4.0= 7.4.1= 7.4.2= 7.4.3= 7.5= 7.5.0= 7.6= 7.6.0= 7.6.1= 7.6.2= 7.7= 7.7.0= 7.7.1= 8.0.0= 8.0.1= 8.0.2= 8.1= 8.1.1= 8.2= 8.2.1= 9.0.0= 9.0.1= 9.0.2= 9.0.3= 9.2= 9.2.1≤ 10.4.1 |
CoreFoundation, as used in Apple iTunes before 10.5, does not properly perform string tokenization, which allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via unspecified vectors.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free