Unscored CVE-2014-1242 EUVD-2014-1320GHSA-w8mj-gh63-9r4f

Apple iTunes before 11.1.4 uses HTTP for the iTunes Tutorials window, which allows man-in-the-middle attackers to spoof content by gaining …

Published Jan 23, 2014 · Updated Aug 6, 2024 · Assigned by apple

Description

Apple iTunes before 11.1.4 uses HTTP for the iTunes Tutorials window, which allows man-in-the-middle attackers to spoof content by gaining control over the client-server data stream.

References

65088 vdb-entry
1029671 vdb-entry
102410 vdb-entry
http://support.apple.com/kb/HT6001
apple-itunes-cve20141242-mitm(90653) vdb-entry