Apple iTunes < 12.3 Multiple Vulnerabilities (uncredentialed check)
Critical Nessus Plugin ID 86601
Synopsis
The remote host contains an application that is affected by multiple vulnerabilities.
Description
The version of Apple iTunes running on the remote host is prior to 12.3. It is, therefore, affected by multiple vulnerabilities in the WebKit, CoreText, and ICU components, and in the bundled version of the Microsoft Visual Studio C++ Redistributable Package. An attacker can exploit these vulnerabilities to cause a denial of service, execute arbitrary code, or gain access to encrypted SMB credentials.
Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.
Solution
Upgrade to Apple iTunes version 12.3 or later.