| Package | Affected versions | Patched versions |
|---|---|---|
| itunes | = 10.0= 10.0.1= 10.1= 10.1.1= 10.1.1.4= 10.1.2= 10.2= 10.2.2.12= 10.3= 10.3.1= 10.4= 10.4.0.80= 10.4.1= 10.4.1.10= 10.5= 10.5.1= 10.5.1.42= 10.5.2= 10.5.3= 10.6= 10.6.1= 10.6.3= 4.0.0= 4.0.1= 4.1.0= 4.2.0= 4.5= 4.5.0= 4.6= 4.6.0= 4.7= 4.7.0= 4.7.1= 4.7.2= 4.8.0= 4.9.0= 5.0= 5.0.0= 5.0.1= 6.0.0= 6.0.1= 6.0.2= 6.0.3= 6.0.4= 6.0.5= 7.0.0= 7.0.1= 7.0.2= 7.1.0= 7.1.1= 7.2.0= 7.3.0= 7.3.1= 7.3.2= 7.4= 7.4.0= 7.4.1= 7.4.2= 7.4.3= 7.5= 7.5.0= 7.6= 7.6.0= 7.6.1= 7.6.2= 7.7= 7.7.0= 7.7.1= 8.0.0= 8.0.1= 9.0.0= 9.0.1= 9.0.2= 9.0.3= 9.1= 9.1.1= 9.2= 9.2.1≤ 11.0.2 |
Apple iTunes before 11.0.3 does not properly verify X.509 certificates, which allows man-in-the-middle attackers to spoof HTTPS servers via an arbitrary valid certificate.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free