CVE-2011-0125: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbit...

Security readout for executives and security teams

This is an old Apple iTunes for Windows issue in WebKit. If a user browsed the iTunes Store through a hostile network path, an attacker in the middle could potentially run code or crash the application. No source in the bundle shows active exploitation. Exposure is most likely limited to legacy Windows systems still running Apple iTunes versions before 10.2. Modern fleets are unlikely to be affected unless old software remains installed on unmanaged or specialized endpoints. Treat this as a legacy-software cleanup issue unless old iTunes for Windows remains deployed. It matters because the stated impact includes code execution, but urgency depends on whether affected versions still exist in your environment. Mitigation focus: Upgrade Apple iTunes for Windows to version 10.2 or later.; Remove legacy iTunes where it is not required for business use.; Check Apple advisory guidance for the applicable fixed release..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.