iTunes U < 3.8.3 - Remote Code Execution via Malicious URL Processing
A validation issue was addressed with improved input sanitization. This issue is fixed in iTunes U 3.8.3. Processing a maliciously crafted URL may lead to arbitrary javascript code execution.