CVE-2010-1795
Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista,...
Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote attackers to gain privileges via a Trojan horse DLL in the current working directory.
Exploit likelihood
What each source reports
NVD Score used
Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote attackers to gain privileges via a Trojan horse DLL in the current working directory.
- Record
CVE-2010-1795- CVSS 2.0
- 9.3 High
AV:N/AC:M/Au:N/C:C/I:C/A:C - Updated
- 2026-11-02
CVE List No score
Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote attackers to gain privileges via a Trojan horse DLL in the current working directory.
- Record
CVE-2010-1795- Updated
- 2026-11-02
EUVDEUVD-2010-1815 No score
Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote attackers to gain privileges via a Trojan horse DLL in the current working directory.
- Record
EUVD-2010-1815- Updated
- 2026-11-03
GitHub AdvisoriesGHSA-v7v8-f46h-v388 No score
Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista,...
Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote attackers to gain privileges via a Trojan horse DLL in the current working directory.
- Record
GHSA-v7v8-f46h-v388- Updated
- 2026-11-02
Affected products
History
| Recorded | Changed | Sources |
|---|---|---|
| aliases | EUVD | |
| first indexed | CVE List, GitHub Advisories, NVD |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2010-1795 is a high vulnerability (CVSS 9.3) in Apple Itunes, published August 20, 2010. No source lists public exploit code. EPSS puts the chance of exploitation in the next 30 days at 3.04%, the 87th percentile. No source names a fixed version.
References
exchange.xforce.ibmcloud.com/vulnerabilities/61223
support.apple.com/kb/HT4105
oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7217
securityfocus.com/bid/42541
acrossecurity.com/aspr/ASPR-2010-08-18-1-PUB.txt
nvd.nist.gov/vuln/detail/CVE-2010-1795
github.com/advisories/GHSA-v7v8-f46h-v388