WebKit, as used in Apple iTunes before 10.6, allows man-in-the-middle attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via vectors related to iTunes Store browsing, a different vulnerability than other CVEs listed in APPLE-SA-2012-03-07-1.

The remote host has iTunes installed, a popular media player for Windows and Mac OS.  

Versions of iTunes earlier than 10.6 are reportedly affected by numerous memory corruption vulnerabilities in its WebKit component.  Note that these issues only affect iTunes on Windows.

The version of Apple iTunes on the remote host is prior to version 10.6. It is, therefore, affected by multiple memory corruption vulnerabilities in the WebKit component. Note that these only affect iTunes for Windows.

The version of Apple iTunes installed on the remote Windows host is older than 10.6.  Thus, it is reportedly affected by numerous memory corruption vulnerabilities in its WebKit component.

ID	Name	Product	Family	Type	Severity
6345	iTunes < 10.6 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients		high
58320	Apple iTunes < 10.6 Multiple Vulnerabilities (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	Remote	high
58319	Apple iTunes < 10.6 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	Local	high

Detections

Analytics

CVE-2012-0634

high

Tenable Plugins

high

high

high