Multiple critical vulnerabilities have been found in Apple iTunes. Malicious users can exploit these vulnerabilities to cause denial of service, execute arbitrary code or spoof HTTPS servers. Below is a complete list of vulnerabilities

1. Vectors related to browsing the iTunes Store can be exploited remotely by man-in-the-middle attacks;
2. Improper certificate verification can be exploited remotely by man-in-the-middle attacks.

Apple iTunes versions 11.0.2 and earlier

Update to latest version
iTunew

Apple bulletin