Description
Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.
Affected products
- Apple / itunes4.7 – 4.7
Exploits & proofs of concept
- exploit-dbApple iTunes 4.7 - Playlist Buffer Overflow (Metasploit)by Metasploit
- exploit-dbApple iTunes - Playlist Parsing Local Buffer Overflowby nemo
References
- MISChttp://www.kb.cert.org/vuls/id/377368
- MISChttp://securitytracker.com/id?1012839
- MISChttps://exchange.xforce.ibmcloud.com/vulnerabilities/18851
- VENDOR_ADVISORYhttp://secunia.com/advisories/13804
- MISChttp://www.idefense.com/application/poi/display?id=180&type=vulnerabilities
- MAILING_LISThttp://lists.apple.com/archives/security-announce/2005/Jan/msg00000.html
- MISChttp://www.osvdb.org/12833
- MISChttp://www.securityfocus.com/bid/12238
Updated 8m ago · 8 sources