Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
nessusTenable5894.PRM
HistoryApr 19, 2011 - 12:00 a.m.

iTunes < 10.2.2 Multiple Vulnerabilities

2011-04-1900:00:00
Tenable
www.tenable.com
18

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.338

Percentile

97.1%

JSON

The remote host has iTunes installed, a popular media player for Windows and Mac OS.

Versions of iTunes earlier than 10.2.2 are potentially affected by several issues :

  • An integer overflow issue in the handling of nodesets could lead to a crash or arbitrary code execution. (CVE-2011-1290)

  • A use after free issue in the handling of text nodes could lead to a crash or arbitrary code execution. (CVE-2011-1344)

Binary data 5894.prm

Related

nessus 8
openvas 10
securityvulns 7
zdi 2
cve 3
nvd 3
chrome 1
ubuntucve 2
prion 2
debiancve 1
cvelist 2
debian 2
osv 1
freebsd 1
nessus
nessus
Apple iTunes < 10.2.2 Multiple Vulnerabilities (uncredentialed check)
2011-04-19 00:00:00
Mac OS X : Apple Safari < 5.0.5
2011-04-14 00:00:00
SuSE 11.2 Security Update : libwebkit (SAT Patch Number 7114)
2013-01-25 00:00:00
openvas
openvas
Apple iTunes Arbitrary Code Execution Vulnerability - Mac OS X
2011-08-29 00:00:00
Apple iTunes Arbitrary Code Execution Vulnerability (Mac OS X)
2011-08-29 00:00:00
Apple Safari Multiple Vulnerabilities - April 2011 (Mac OS X)
2011-08-12 00:00:00
securityvulns
securityvulns
Apple WebKit / Safari multiple security vulnerabilities
2011-04-21 00:00:00
About the security content of Safari 5.0.5
2011-04-19 00:00:00
ZDI-11-104: &#40;Pwn2Own&#41; Webkit CSS Text Element Count Remote Code Execution Vulnerability
2011-04-19 00:00:00
zdi
zdi
(Pwn2Own) WebKit WBR Tag Removal Remote Code Execution Vulnerability
2011-04-14 00:00:00
(Pwn2Own) Webkit CSS Text Element Count Remote Code Execution Vulnerability
2011-04-14 00:00:00
cve
cve
CVE-2011-1344
2011-03-10 20:55:01
CVE-2011-1290
2011-03-11 21:57:16
CVE-2011-1415
2011-03-11 17:55:03
nvd
nvd
CVE-2011-1344
2011-03-10 20:55:01
CVE-2011-1290
2011-03-11 21:57:16
CVE-2011-1415
2011-03-11 17:55:03
chrome
chrome
Stable and Beta Channel Updates
2011-03-11 00:00:00
ubuntucve
ubuntucve
CVE-2011-1344
2011-03-10 00:00:00
CVE-2011-1290
2011-03-11 00:00:00
prion
prion
Design/Logic Flaw
2011-03-10 20:55:00
Integer overflow
2011-03-11 21:57:00
debiancve
debiancve
CVE-2011-1290
2011-03-11 21:57:00
cvelist
cvelist
CVE-2011-1344
2011-03-10 20:00:00
CVE-2011-1290
2011-03-11 21:00:00
debian
debian
[SECURITY] [DSA 2192-1] chromium-browser security update
2011-03-15 16:31:47
[SECURITY] [DSA 2192-1] chromium-browser security update
2011-03-15 16:31:47
osv
osv
chromium-browser - several
2011-03-15 00:00:00
freebsd
freebsd
chromium -- multiple vulnerabilities
2010-10-19 00:00:00

CVSS2

10

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

EPSS

0.338

Percentile

97.1%

JSON
Related for 5894.PRM
nessus8openvas10securityvulns7zdi2cve3nvd3chrome1ubuntucve2prion2debiancve1cvelist2debian2osv1freebsd1