CVE-2011-0145: WebKit, as used in Apple iTunes before 10.2 on Windows, allows man-in-the-middle attackers to execute arbit...

Security readout for executives and security teams

This is an old Apple iTunes for Windows issue in the bundled WebKit browser engine. A network attacker in a man-in-the-middle position could potentially make iTunes crash or run arbitrary code when a user browsed the iTunes Store. The source bundle identifies affected versions as iTunes before 10.2 on Windows. Exposure is most likely limited to Windows endpoints running Apple iTunes before 10.2. Current exposure depends on whether legacy iTunes installations remain in the environment and whether users can browse the iTunes Store from networks where traffic could be intercepted. Prioritize remediation if legacy Windows systems still run old iTunes. The business urgency is lower for modern managed fleets without iTunes, but any confirmed pre-10.2 installation should be treated as a code-execution risk and removed or updated. Mitigation focus: Upgrade Apple iTunes for Windows to 10.2 or later per Apple guidance.; Check the linked Apple advisories for the applicable update path.; Remove obsolete iTunes installations from Windows systems where no business need exists..

Prepared

Jun 24, 2026, 13:28 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.