CVE-2011-2339: WebKit, as used in Apple iTunes before 10.5, allows man-in-the-middle attackers to execute arbitrary code o...

Security readout for executives and security teams

This vulnerability affects WebKit as used by Apple iTunes before version 10.5. A network attacker positioned as a man-in-the-middle could cause code execution or crash iTunes during iTunes Store browsing. The issue is old, but any unmanaged legacy iTunes installation remains relevant. Exposure is likely limited to endpoints still running Apple iTunes before 10.5. Risk is higher on untrusted or interceptable networks where man-in-the-middle conditions are plausible. Modern managed environments are less likely exposed unless legacy media or application stacks remain installed. Prioritize as a legacy exposure cleanup item unless pre-10.5 iTunes is still present. If found on production or executive endpoints, remediate promptly because the described impact includes code execution under network interception conditions. Mitigation focus: Identify and remove unsupported legacy iTunes installations where business need is absent.; Upgrade iTunes before 10.5 to Apple’s fixed release or later supported software.; Restrict use of legacy iTunes on untrusted networks until remediated..

Prepared

Jun 27, 2026, 17:48 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.