Test ID:	1.3.6.1.4.1.25623.1.0.810208
Category:	General
Title:	Apple iTunes Arbitrary Code Execution Vulnerability - Windows
Summary:	Apple iTunes is prone to an arbitrary code execution; vulnerability.
Description:	Summary: Apple iTunes is prone to an arbitrary code execution vulnerability. Vulnerability Insight: The flaw is due to a dynamic library loading issue in iTunes setup. Vulnerability Impact: Successful exploitation will allow remote attackers to local users to gain privileges via a Trojan horse DLL in the current working directory. Affected Software/OS: Apple iTunes versions before 12.4 on Windows. Solution: Update to version 12.4 or later. CVSS Score: 7.2 CVSS Vector: AV:L/AC:L/Au:N/C:C/I:C/A:C
Cross-Ref:	Common Vulnerability Exposure (CVE) ID: CVE-2016-1742 http://lists.apple.com/archives/security-announce/2016/May/msg00006.html http://www.securitytracker.com/id/1035887
Copyright	Copyright (C) 2016 Greenbone AG

This is only one of 145615 vulnerability tests in our test suite. Find out more about running a complete security audit. To run a free test of this vulnerability against your system, register below.