CVE-2014-1242 in Apple iTunes
Summary
Apple iTunes before 11.1.4 uses HTTP for the iTunes Tutorials window, which allows man-in-the-middle attackers to spoof content by gaining control over the client-server data stream.
Reservation
01/08/2014
Disclosure
01/23/2014
Entries
VulDB provides additional information and datapoints for this CVE:
| ID | Vulnerability | CWE | Exp | Cou | CVE |
|---|---|---|---|---|---|
| 12065 | Apple iTunes Tutorials Window Content cryptographic issue | 310 | Proof-of-Concept | Official fix | CVE-2014-1242 |