CVE-2013-1035

Description

The iTunes ActiveX control in Apple iTunes before 11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.

Risk Information

Base Score

8.8

MODERATE

Vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

EPSS Score

Exploitation Probability

1.714

Associated Vulnerability

Vulnerability	OS Platform
Multiple Vulnerabilities are affected in Apple iTunes (X64) 11.0.2	Windows
Multiple Vulnerabilities are affected in Apple iTunes 11.0.2	Windows
Multiple Vulnerabilities are affected in Apple iTunes For Mac 11.0.2	Mac
Vulnerabilities CVE-2013-1035,CVE-2014-1242,CVE-2014-1347 are affected in Apple iTunes For Mac 11.0	Mac
Vulnerabilities CVE-2013-1035,CVE-2014-1242,CVE-2014-1347 are affected in Apple iTunes For Mac 11.0.1	Mac
Vulnerabilities CVE-2013-1035,CVE-2014-1242,CVE-2014-1347 are affected in Apple iTunes For Mac 11.0.3	Mac
Vulnerabilities CVE-2013-1035,CVE-2014-1242,CVE-2014-1347 are affected in Apple iTunes For Mac 11.0.4	Mac
Vulnerabilities CVE-2013-1035,CVE-2014-1242,CVE-2014-1347 are affected in Apple iTunes For Mac 11.0.5	Mac

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234