GCVE - cpe:2.3:a:apple:itunes:9.0.1:-:windows:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apple:itunes:9.0.1:-:windows:*:*:*:*:*

part: a version: 9.0.1 update: -

Vendor	Apple (`c2b419d0-9f0f-51c1-88dc-2e204a98e1c7`)
Product	Itunes (`070f0504-eb09-503b-89ba-8a3202d30355`)
Edition	windows
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2010-1795`	vulnerable	2026-06-08 04:54:10.533454	Details available Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote attackers to gain privileges via a Trojan horse DLL in the current working directory. Published: 2010-08-20T19:00:00.000Z Updated: 2024-08-07T01:35:53.648Z Open on db.gcve.eu Reference links https://exchange.xforce.ibmcloud.com/vulnerabilities/61223 http://support.apple.com/kb/HT4105 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7217 http://www.securityfocus.com/bid/42541 http://www.acrossecurity.com/aspr/ASPR-2010-08-18-1-PUB.txt	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1769`	vulnerable	2026-06-08 04:54:10.328085	Details available WebKit in Apple iTunes before 9.2 on Windows, and Apple iOS before 4 on the iPhone and iPod touch, accesses out-of-bounds memory during the handling of tables, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted HTML document, a different vulnerability than CVE-2010-1387 and CVE-2010-1763. Published: 2010-06-18T16:00:00.000Z Updated: 2024-08-07T01:35:53.555Z Open on db.gcve.eu Reference links http://support.apple.com/kb/HT4220 http://secunia.com/advisories/43068 http://www.vupen.com/english/advisories/2011/0212 http://support.apple.com/kb/HT4225 http://secunia.com/advisories/40196	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-1763`	vulnerable	2026-06-08 04:54:10.255593	Details available Unspecified vulnerability in WebKit in Apple iTunes before 9.2 on Windows has unknown impact and attack vectors, a different vulnerability than CVE-2010-1387 and CVE-2010-1769. Published: 2010-06-18T16:00:00.000Z Updated: 2024-08-07T01:35:53.708Z Open on db.gcve.eu Reference links http://support.apple.com/kb/HT4220 http://secunia.com/advisories/43068 http://www.vupen.com/english/advisories/2011/0212 https://exchange.xforce.ibmcloud.com/vulnerabilities/59507 http://secunia.com/advisories/40196	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0532`	vulnerable	2026-06-08 04:52:03.022306	Details available Race condition in the installation package in Apple iTunes before 9.1 on Windows allows local users to gain privileges by replacing an unspecified file with a Trojan horse. Published: 2010-03-31T18:00:00.000Z Updated: 2024-08-07T00:52:19.342Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7110 http://secunia.com/advisories/39135 http://support.apple.com/kb/HT4105 http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2010-0531`	vulnerable	2026-06-08 04:52:03.014636	Details available Apple iTunes before 9.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 podcast file. Published: 2010-03-31T18:00:00.000Z Updated: 2024-08-07T00:52:19.787Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7427 http://secunia.com/advisories/39135 http://support.apple.com/kb/HT4105 http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.