Home / mailings APPLE-SA-2013-09-18-1 iTunes 11.1
Posted on 18 September 2013
Apple Security-announce-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
APPLE-SA-2013-09-18-1 iTunes 11.1
iTunes 11.1 is now available and addresses the following:
iTunes
Available for: Windows 7, Vista, XP SP2 or later
Impact: Visiting a maliciously crafted website may lead to an
unexpected application termination or arbitrary code execution
Description: A memory corruption issue existed in the iTunes ActiveX
control. This issue was addressed through additional bounds checking.
CVE-ID
CVE-2013-1035 : Honggang Ren of Fortinet's FortiGuard Labs
iTunes 11.1 may be obtained from:
http://www.apple.com/itunes/download/
For Windows XP / Vista / Windows 7:
The download file is named: "iTunesSetup.exe"
Its SHA-1 digest is: cef0f1398e1d51fd2f832c12763c2bf1627379ee
For 64-bit Windows XP / Vista / Windows 7:
The download file is named: "iTunes64Setup.exe"
Its SHA-1 digest is: 5efe95a1f1df32f3833e5972db02e37ca7bfc43d
Information will also be posted to the Apple Security Updates
web site: http://support.apple.com/kb/HT1222
This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/