« Volver al listado

CVE-2010-0532

Estado: ModificadaMedia (6.9)—

Condición de carrera en el paquete de instalación en Apple iTunes en versiones anteriores a la 9.1 en Windows permite a atacantes locales escalar privilegios remplazando un fichero no especificado por un Troyano.

CVSS

Probabilidad de explotación (EPSS)

EPSS (Exploit Prediction Scoring System, de FIRST) estima la probabilidad de que una vulnerabilidad sea explotada en 30 días. Complementa a CVSS (impacto) y a CISA KEV (explotación confirmada).

Tecnologías afectadas (1)

Apple — Itunes

CWE

Referencias

JSON original (NVD)

Mostrar
{
  "id": "CVE-2010-0532",
  "cveTags": [],
  "metrics": {
    "cvssMetricV2": [
      {
        "type": "Primary",
        "source": "nvd@nist.gov",
        "cvssData": {
          "version": "2.0",
          "baseScore": 6.9,
          "accessVector": "LOCAL",
          "vectorString": "AV:L/AC:M/Au:N/C:C/I:C/A:C",
          "authentication": "NONE",
          "integrityImpact": "COMPLETE",
          "accessComplexity": "MEDIUM",
          "availabilityImpact": "COMPLETE",
          "confidentialityImpact": "COMPLETE"
        },
        "acInsufInfo": false,
        "impactScore": 10,
        "baseSeverity": "MEDIUM",
        "obtainAllPrivilege": false,
        "exploitabilityScore": 3.4,
        "obtainUserPrivilege": false,
        "obtainOtherPrivilege": false,
        "userInteractionRequired": true
      }
    ]
  },
  "affected": [
    {
      "source": "product-security@apple.com",
      "affectedData": [
        {
          "vendor": "n/a",
          "product": "n/a",
          "versions": [
            {
              "status": "affected",
              "version": "n/a"
            }
          ]
        }
      ]
    }
  ],
  "published": "2010-03-31T18:30:00.407",
  "references": [
    {
      "url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "product-security@apple.com"
    },
    {
      "url": "http://secunia.com/advisories/39135",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "product-security@apple.com"
    },
    {
      "url": "http://support.apple.com/kb/HT4105",
      "source": "product-security@apple.com"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7110",
      "source": "product-security@apple.com"
    },
    {
      "url": "http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html",
      "tags": [
        "Patch",
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://secunia.com/advisories/39135",
      "tags": [
        "Vendor Advisory"
      ],
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "http://support.apple.com/kb/HT4105",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    },
    {
      "url": "https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7110",
      "source": "af854a3a-2127-422b-91ae-364da2661108"
    }
  ],
  "vulnStatus": "Modified",
  "weaknesses": [
    {
      "type": "Primary",
      "source": "nvd@nist.gov",
      "description": [
        {
          "lang": "en",
          "value": "CWE-362"
        }
      ]
    }
  ],
  "descriptions": [
    {
      "lang": "en",
      "value": "Race condition in the installation package in Apple iTunes before 9.1 on Windows allows local users to gain privileges by replacing an unspecified file with a Trojan horse."
    },
    {
      "lang": "es",
      "value": "Condición de carrera en el paquete de instalación en Apple iTunes en versiones anteriores a la 9.1 en Windows permite a atacantes locales escalar privilegios remplazando un fichero no especificado por un Troyano."
    }
  ],
  "lastModified": "2026-06-16T23:16:21.033",
  "configurations": [
    {
      "nodes": [
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:a:apple:itunes:*:-:windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F63692D6-3FAD-449C-B610-35479FBDE89C",
              "versionEndIncluding": "9.0.3"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:9.0:-:windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "B1E809C8-4212-4C32-B3C9-314859CE04EB"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:9.0.0:-:windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F517459A-E3CD-4BBC-A38B-C83B0E761939"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:9.0.1:-:windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "F3A1B79A-D89C-416B-9AC6-17E2DC543FDD"
            },
            {
              "criteria": "cpe:2.3:a:apple:itunes:9.0.2:-:windows:*:*:*:*:*",
              "vulnerable": true,
              "matchCriteriaId": "90B7F3C0-3266-4611-92D9-E39CD6970641"
            }
          ],
          "operator": "OR"
        },
        {
          "negate": false,
          "cpeMatch": [
            {
              "criteria": "cpe:2.3:o:microsoft:windows_7:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "D56B932B-9593-44E2-B610-E4EB2143EB21"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_vista:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "3852BB02-47A1-40B3-8E32-8D8891A53114"
            },
            {
              "criteria": "cpe:2.3:o:microsoft:windows_xp:*:*:*:*:*:*:*:*",
              "vulnerable": false,
              "matchCriteriaId": "E61F1C9B-44AF-4B35-A7B2-948EEF7639BD"
            }
          ],
          "operator": "OR"
        }
      ],
      "operator": "AND"
    }
  ],
  "evaluatorImpact": "Per: http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html\r\n\r\n'This issue does not affect Mac OS X systems.'",
  "sourceIdentifier": "product-security@apple.com"
}