CVE-2011-0129: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbit...

Security readout for executives and security teams

This is an old Apple iTunes for Windows issue. If a Windows machine used iTunes before version 10.2 to browse the iTunes Store, a network attacker positioned in the middle could trigger memory corruption, potentially causing code execution or a crash. Exposure is most likely limited to legacy Windows endpoints still running Apple iTunes earlier than 10.2. Modern managed fleets are unlikely to be affected unless old software images, kiosks, lab systems, or unmanaged workstations remain in service. Treat this as a legacy exposure cleanup item unless old Windows systems with iTunes remain active. If found, remediate promptly because the stated impact includes code execution, but the evidence does not support emergency active-exploitation handling. Mitigation focus: Update Apple iTunes for Windows to version 10.2 or later.; Remove obsolete iTunes installations from Windows systems where not needed.; Check Apple advisory guidance before relying on compensating controls..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.