The version of Apple iTunes installed on the remote Windows host is prior to 12.3. It is, therefore, affected by multiple vulnerabilities in the bundled versions of WebKit, CoreText, the Microsoft Visual Studio C++ Redistributable Package, and ICU.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of Apple iTunes running on the remote host is prior to 12.3. It is, therefore, affected by multiple vulnerabilities in the WebKit, CoreText, and ICU components, and in the bundled version of the Microsoft Visual Studio C++ Redistributable Package. An attacker can exploit these vulnerabilities to cause a denial of service, execute arbitrary code, or gain access to encrypted SMB credentials.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

リモートのWindowsホストにインストールされているApple iTunesのバージョンは、12.3より前です。このため、バンドルされたバージョンの WebKit、CoreText、Microsoft Visual Studio C++ Redistributable Package、および ICU の複数の脆弱性の影響を受けます。

Nessus はこれらの問題をテストしておらず、代わりにアプリケーションの自己報告されたバージョン番号にのみ依存しています。

リモートホストで実行している Apple iTunes のバージョンは、 12.3 より前のバージョンです。このため、WebKit、CoreText、および ICU コンポーネントで、また Microsoft Visual Studio C++ Redistributable Package のバンドル版で複数の脆弱性に影響を受けます。攻撃者がこれらの脆弱性を悪用して、サービス拒否を引き起こしたり、任意のコードを実行したり、暗号化された SMB 認証情報にアクセスしたりする可能性があります。

Nessus はこれらの問題に対してテストされていませんが、その代わりにアプリケーションの自己報告されたバージョン番号のみに依存していることに、注意してください。

遠端 Windows 主機上安裝的 Apple iTunes 版本比 12.3 舊。因此受到 WebKit 的隨附版本、CoreText、Microsoft Visual Studio C++ Redistributable Package 與 ICU 中的多個弱點影響。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼。

遠端主機上安裝的 Apple iTunes 版本比 12.3 舊。因此會受到 WebKit、CoreText 和 ICU 元件及隨附版 Microsoft Visual Studio C++ Redistributable Package 中的多個弱點影響。攻擊者可惡意利用這些弱點，造成拒絕服務、執行任意程式碼或取得加密 SMB 認證的存取權。

請注意，Nessus 並未測試這些問題，而是僅依據應用程式自我報告的版本號碼。

远程 Windows 主机上安装的 Apple iTunes 版本低于 12.3。因此，它受到 WebKit、CoreText、Microsoft Visual Studio C++ Redistributable Package 和 ICU 的捆绑版本中的多种漏洞的影响。

请注意，Nessus 并未测试这些问题，而是只依赖于应用程序自我报告的版本号。

远程主机上运行的 Apple iTunes 版本低于 12.3。因此，它受到 WebKit、CoreText 和 ICU 组件中以及 Microsoft Visual Studio C++ Redistributable Package 的捆绑版本中多种漏洞的影响。攻击者可利用这些漏洞造成拒绝服务、执行任意代码或者获取已加密 SMB 凭据的访问权限。

请注意，Nessus 并未测试这些问题，而是只依赖于应用程序自我报告的版本号。

Versions of iTunes earlier than 12.3 are affected by multiple vulnerabilities which include :

 - A flaw exists in Microsoft Foundation Class's handling of library loading due to the use of a fixed path.  An attacker can place a custom version of the file or library in the path, and the program will load it before the legitimate version.  Thus, an attacker can leverage this flaw to execute custom code. (CVE-2010-3190)
 - International Components for Unicode for C/C++ (ICU4C) contains several flaws.  An overflow condition exists in the resolveImplicitLevels() function in 'ubidi.c', which is triggered as user-supplied input is not properly validated. Additionally, an integer truncation flaw exists in the same function in 'ubidi.c'.   Either flaw may allow an attacker to crash an application linked against the library or potentially execute arbitrary code. (CVE-2014-8146, CVE-2014-8147, CVE-2015-5922)
 - A flaw exists in CoreText that is triggered as user-supplied input is not properly validated when handling text and font files. This may allow a context-dependent attacker can corrupt memory and potentially execute arbitrary code. (CVE-2015-1157, CVE-2015-5874, CVE-2015-3686, CVE-2015-3687, CVE-2015-3688, CVE-2015-5755, CVE-2015-5761)
 - A flaw exists that is triggered as user-supplied input is not properly validated. This may allow a context-dependent attacker to corrupt memory and potentially execute arbitrary code. (CVE-2015-1152, CVE-2015-1153, CVE-2015-3730, CVE-2015-3731, CVE-2015-3733, CVE-2015-3734, CVE-2015-3735, CVE-2015-3736, CVE-2015-3737, CVE-2015-3738, CVE-2015-3739, CVE-2015-3740, CVE-2015-3741, CVE-2015-3742, CVE-2015-3743, CVE-2015-3744, CVE-2015-3745, CVE-2015-3746, CVE-2015-3747, CVE-2015-3748, CVE-2015-3749, CVE-2015-5789, CVE-2015-5790, CVE-2015-5791, CVE-2015-5792, CVE-2015-5793, CVE-2015-5794, CVE-2015-5795, CVE-2015-5796, CVE-2015-5797, CVE-2015-5798, CVE-2015-5799, CVE-2015-5800, CVE-2015-5801, CVE-2015-5802, CVE-2015-5803, CVE-2015-5804, CVE-2015-5805, CVE-2015-5806, CVE-2015-5807, CVE-2015-5808, CVE-2015-5809, CVE-2015-5810, CVE-2015-5811, CVE-2015-5812, CVE-2015-5813, CVE-2015-5814, CVE-2015-5815, CVE-2015-5816, CVE-2015-5817, CVE-2015-5818, CVE-2015-5819, CVE-2015-5821, CVE-2015-5822, CVE-2015-5823)
 - An unspecified flaw exists that is triggered during the handling of network connection redirects. This may allow a remote man-in-the-middle attacker to gain access to hashed SMB credential information. (CVE-2015-5920)

ID	Name	Product	Family	Published	Updated	Severity
86001	Apple iTunes < 12.3 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	9/18/2015	11/22/2019	high
86601	Apple iTunes < 12.3 Multiple Vulnerabilities (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	10/26/2015	11/20/2019	high
86001	Apple iTunes < 12.3複数の脆弱性 (認証情報のチェック)	Nessus	Windows	9/18/2015	11/22/2019	high
86601	Apple iTunes < 12.3 複数の脆弱性（uncredentialed check）	Nessus	Peer-To-Peer File Sharing	10/26/2015	11/20/2019	high
86001	Apple iTunes < 12.3 多個弱點 (經認證的檢查)	Nessus	Windows	9/18/2015	11/22/2019	high
86601	Apple iTunes < 12.3 多個弱點 (未經認證的檢查)	Nessus	Peer-To-Peer File Sharing	10/26/2015	11/20/2019	high
86001	Apple iTunes < 12.3 多种漏洞（凭据检查）	Nessus	Windows	9/18/2015	11/22/2019	high
86601	Apple iTunes < 12.3 多种漏洞（无凭据检查）	Nessus	Peer-To-Peer File Sharing	10/26/2015	11/20/2019	high
8958	iTunes for Windows < 12.3 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients	10/23/2015	3/6/2019	high

Detections

Analytics

Plugins Search

high

high

high

high

high

high

high

high

high