CVEvulnerability

CVE-2005-2938

7.2 HIGH Published 2005-11-18 Modified 2026-06-16 Official page ↗
Status
Modified
Published
2005-11-18
Last modified
2026-06-16
Assigner
[email protected]
CVSS 2.0 ([email protected])
7.2 HIGH — AV:L/AC:L/Au:N/C:C/I:C/A:C
Weaknesses
CWE-264

Description

Unquoted Windows search path vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows might allow local users to gain privileges via a malicious C:\program.exe file.

Affected configurations

• apple itunes 4.7.1.30 • apple itunes 5.0

Related

Weakness · not in database (1)

Referenced by CWE · observed example (1)

  • CWE-428 Unquoted Search Path or Element weakness

References