Summary
This host is installed with Apple iTunes and is prone to remote code execution vulnerability.
Impact
Successful exploitation could allow attackers to execute arbitrary code in the context of the user running the affected application.
Impact Level: Application
Solution
Upgrade to Apple Apple iTunes version 10.5.1 or later, For updates refer to http://www.apple.com/itunes/download/
Insight
The flaw is due to the improper verification of authenticity of updates, allows man-in-the-middle attack execute arbitrary code via a Trojan horse update.
Affected
Apple iTunes version prior to 10.5.1 on Mac OS X
References
Severity
Classification
-
CVE CVE-2008-3434 -
CVSS Base Score: 7.5
AV:N/AC:L/Au:N/C:P/I:P/A:P
Related Vulnerabilities