Vulnerability Database

296,223

Total vulnerabilities in the database

CVE-2014-1242

Apple iTunes before 11.1.4 uses HTTP for the iTunes Tutorials window, which allows man-in-the-middle attackers to spoof content by gaining control over the client-server data stream.

Published: Jan 23, 2014
Updated: Apr 13, 2023
CVE: CVE-2014-1242
Severity: Medium
Exploit:

CVSS v2:

Severity: Medium
Score: 5.8
AV:N/AC:M/Au:N/C:N/I:P/A:P

CWEs:

CWE-310

Affected Software
References

Software	From	Fixed in
apple / itunes	11.1	11.1.x
apple / itunes	11.0.4	11.0.4.x
apple / itunes	11.0	11.0.x
apple / itunes	11.0.1	11.0.1.x
apple / itunes	11.1.2	11.1.2.x
apple / itunes	11.0.5	11.0.5.x
apple / itunes	11.0.3	11.0.3.x
apple / itunes	-	11.1.3.x
apple / itunes	11.1.1	11.1.1.x
apple / itunes	11.0.2	11.0.2.x