VYPR
← All advisories
Unrated severityNVD Advisory· Published Jan 23, 2014· Updated Jun 17, 2026

CVE-2014-1242

CVE-2014-1242

Description

Apple iTunes before 11.1.4 uses HTTP for the iTunes Tutorials window, which allows man-in-the-middle attackers to spoof content by gaining control over the client-server data stream.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

11
  • Apple Inc./iTunes11 versions
    cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*+ 10 more
    • cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*range: <=11.1.3
    • cpe:2.3:a:apple:itunes:11.0:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.0.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.0.2:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.0.3:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.0.4:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.0.5:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.1.1:*:*:*:*:*:*:*
    • cpe:2.3:a:apple:itunes:11.1.2:*:*:*:*:*:*:*
    • (no CPE)range: < 11.1.4

Patches

Vulnerability mechanics

References

5

News mentions

0

No linked articles in our index yet.