Apple iTunes before 11.1.4 uses HTTP for the iTunes Tutorials window, which allows man-in-the-middle attackers to spoof content by gaining control over the client-server data stream.

The version of iTunes installed on the remote Mac OS X host is a version prior to 11.1.4.  It is, therefore, affected by an error related to the iTunes Tutorials window that could allow an attacker in a privileged network location to inject content.

The version of Apple iTunes on the remote host is prior to version 11.1.4. It is, therefore, affected by multiple vulnerabilities :

  - The included versions of the WebKit, libxml, and libxslt     components in iTunes contain several errors that can     lead to memory corruption and arbitrary code execution.
    The vendor states that one possible vector is a man-in-     the-middle attack while the application browses the     'iTunes Store'. Please note that these vulnerabilities     only affect the application when it is running on a     Windows host. (CVE-2011-3102, CVE-2012-0841,     CVE-2012-2807, CVE-2012-2825, CVE-2012-2870,     CVE-2012-2871, CVE-2012-5134, CVE-2013-1037,     CVE-2013-1038, CVE-2013-1039, CVE-2013-1040,     CVE-2013-1041, CVE-2013-1042, CVE-2013-1043,     CVE-2013-1044, CVE-2013-1045, CVE-2013-1046,     CVE-2013-1047, CVE-2013-2842, CVE-2013-5125,     CVE-2013-5126, CVE-2013-5127, CVE-2013-5128)

  - An uninitialized memory access error exists in the     handling of text tracks. By using a specially crafted     movie file, a remote attacker can exploit this to cause     a denial of service or execute arbitrary code.
    (CVE-2013-1024)

  - An error exists related to the iTunes Tutorials window     that can allow an attacker in a privileged network     location to inject content. Note that this vulnerability     only affects the application installed on a Mac OS X     host. (CVE-2014-1242)

The version of Apple iTunes installed on the remote Windows host is older than 11.1.4. It is, therefore, potentially affected by several issues :

  - The included versions of WebKit, libxml, and libxslt     contain several errors that could lead to memory     corruption and possibly arbitrary code execution. The     vendor notes that one possible attack vector is a     man-in-the-middle attack while the application browses     the 'iTunes Store'. (CVE-2011-3102, CVE-2012-0841,     CVE-2012-2807, CVE-2012-2825, CVE-2012-2870,     CVE-2012-2871, CVE-2012-5134, CVE-2013-1037,     CVE-2013-1038, CVE-2013-1039, CVE-2013-1040,     CVE-2013-1041, CVE-2013-1042, CVE-2013-1043,     CVE-2013-1044, CVE-2013-1045, CVE-2013-1046,     CVE-2013-1047, CVE-2013-2842, CVE-2013-5125,     CVE-2013-5126, CVE-2013-5127, CVE-2013-5128)

  - An error exists related to text tracks in movie files     that could allow denial of service or arbitrary code     execution. (CVE-2013-1024)

  - An error exists related to the iTunes Tutorials window     that could allow an attacker in a privileged network     location to inject content. (CVE-2014-1242)

Versions of iTunes earlier than 11.1.4 are affected by an error related to the iTunes Tutorial window that could allow an attacker in a privileged network location to inject content.

ID	Name	Product	Family	Severity
72106	iTunes < 11.1.4 Tutorials Content Injection (Mac OS X)	Nessus	MacOS X Local Security Checks	medium
72105	Apple iTunes < 11.1.4 Multiple Vulnerabilities (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	high
72104	Apple iTunes < 11.1.4 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	high
8096	iTunes (for OS X) < 11.1.4 Tutorials Content Injection	Nessus Network Monitor	Web Clients	high

Detections

Analytics

CVE-2014-1242

medium

Tenable Plugins

medium

high

high

high