Unrated severityNVD Advisory· Published Mar 14, 2009· Updated Jun 16, 2026
CVE-2009-0143
CVE-2009-0143
Description
Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to trick a user into providing a username and password when subscribing to a crafted podcast.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*range: <8.1
- (no CPE)range: <8.1
Patches
Vulnerability mechanics
References
9- lists.apple.com/archives/security-announce//2009/Mar/msg00001.htmlnvdMailing ListPatchVendor Advisory
- support.apple.com/kb/HT3487nvdPatchVendor Advisory
- secunia.com/advisories/34254nvdThird Party Advisory
- securitytracker.com/idnvdThird Party AdvisoryVDB Entry
- www.securityfocus.com/bid/34094nvdThird Party AdvisoryVDB Entry
- www.vupen.com/english/advisories/2009/0702nvdThird Party Advisory
- exchange.xforce.ibmcloud.com/vulnerabilities/49201nvdThird Party AdvisoryVDB Entry
- oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5336nvdThird Party Advisory
- osvdb.org/52579nvdBroken Link
News mentions
0No linked articles in our index yet.