| Package | Affected versions | Patched versions |
|---|---|---|
| itunes | = 1.0= 1.1= 1.1.1= 1.1.2= 2.0= 2.0.1= 2.0.2= 2.0.3= 2.0.4= 3.0= 3.0.1= 4.0= 4.0.1= 4.1= 4.2= 4.5= 4.6= 4.7= 4.7.1= 4.8= 4.9= 5.0= 5.0.1= 6.0= 6.0.1= 6.0.2= 6.0.3= 6.0.4= 6.0.4.2≤ 6.0.5 |
Apple iTunes before 10.5.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free