CVE-2005-2938: Apple iTunes

High severity, CVSS 7.2. EPSS: 0.4% chance of exploitation in the next 30 days.

Unquoted Windows search path vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows might allow local users to gain privileges via a malicious C:\program.exe file.

Affected products

• Apple iTunes: version 4.7.1.30 only; version 5.0 only

Published 2005-11-18. Last modified 2026-06-16.