Apple iTunes < 12.3 Multiple Vulnerabilities (uncredentialed check)
Critical Nessus Plugin ID 86601
SynopsisThe remote host contains an application that is affected by multiple vulnerabilities.
DescriptionThe version of Apple iTunes running on the remote host is prior to 12.3. It is, therefore, affected by multiple vulnerabilities in the WebKit, CoreText, and ICU components, and in the bundled version of the Microsoft Visual Studio C++ Redistributable Package. An attacker can exploit these vulnerabilities to cause a denial of service, execute arbitrary code, or gain access to encrypted SMB credentials.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
SolutionUpgrade to Apple iTunes version 12.3 or later.