Test ID:	1.3.6.1.4.1.25623.1.0.816720
Category:	General
Title:	Apple iTunes Security Update (HT211105)
Summary:	Apple iTunes is prone to multiple vulnerabilities.
Description:	Summary: Apple iTunes is prone to multiple vulnerabilities. Vulnerability Insight: Multiple flaws exist due to: - Multiple buffer overflow issues due to improper size validation and bounds checking. - A type confusion issue due to improper memory handling. - A logic issue due to improper restrictions. - A memory corruption issue due to improper memory handling. - A race condition issue due to improper validation. - A use after free issue due to improper memory management. - A memory consumption issue due to improper memory handling. - An input validation issue due to improper validation. Vulnerability Impact: Successful exploitation allows remote attackers to execute arbitrary code, read restricted memory and conduct cross site scripting attacks. Affected Software/OS: Apple iTunes versions before 12.10.5 Solution: Update to Apple iTunes 12.10.5 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2020-3910 https://support.apple.com/HT211100 https://support.apple.com/HT211101 https://support.apple.com/HT211102 https://support.apple.com/HT211103 https://support.apple.com/HT211105 https://support.apple.com/HT211106 https://support.apple.com/HT211107 Common Vulnerability Exposure (CVE) ID: CVE-2020-3909 https://www.oracle.com/security-alerts/cpuoct2020.html Common Vulnerability Exposure (CVE) ID: CVE-2020-3911 Common Vulnerability Exposure (CVE) ID: CVE-2020-3901 https://support.apple.com/HT211104 Common Vulnerability Exposure (CVE) ID: CVE-2020-3887 Common Vulnerability Exposure (CVE) ID: CVE-2020-3895 Common Vulnerability Exposure (CVE) ID: CVE-2020-3900 Common Vulnerability Exposure (CVE) ID: CVE-2020-3894 Common Vulnerability Exposure (CVE) ID: CVE-2020-3897 Common Vulnerability Exposure (CVE) ID: CVE-2020-9783 Common Vulnerability Exposure (CVE) ID: CVE-2020-3899 Common Vulnerability Exposure (CVE) ID: CVE-2020-3902 Common Vulnerability Exposure (CVE) ID: CVE-2020-3885
Copyright	Copyright (C) 2020 Greenbone Networks GmbH

This is only one of 99761 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.