CVE-2008-3634: Apple iTunes

Low severity, CVSS 2.6. EPSS: 1.6% chance of exploitation in the next 30 days.

Apple iTunes before 8.0 on Mac OS X 10.4.11, when iTunes Music Sharing is enabled but blocked by the host-based firewall, presents misleading information about firewall security, which might allow remote attackers to leverage an exposure that would be absent if the administrator were given better information.

Affected products

• Apple iTunes: any version; up to and including 7.7.1; version 1.0 only; version 1.1 only; version 1.1.1 only; version 1.1.2 only; …

Published 2008-09-11. Last modified 2026-06-16.