high7.5Public exploit code
CVE-2005-0043
Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple iTunes 4.7 - Playlist Buffer Overflow (Metasploit)2010-05-09 · local · windows · Verified
- Apple iTunes - Playlist Parsing Local Buffer Overflow2005-01-16 · local · osx · Verified
Impact
Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Itunes | Version 4.7 |
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2005/Jan/msg00000.html
- http://secunia.com/advisories/13804
- http://securitytracker.com/id?1012839
- http://www.idefense.com/application/poi/display?id=180&type=vulnerabilities
- http://www.kb.cert.org/vuls/id/377368
- http://www.osvdb.org/12833
- http://www.securityfocus.com/bid/12238
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18851
- http://lists.apple.com/archives/security-announce/2005/Jan/msg00000.html
- http://secunia.com/advisories/13804
- http://securitytracker.com/id?1012839
- http://www.idefense.com/application/poi/display?id=180&type=vulnerabilities
- http://www.kb.cert.org/vuls/id/377368
- http://www.osvdb.org/12833
- http://www.securityfocus.com/bid/12238
- https://exchange.xforce.ibmcloud.com/vulnerabilities/18851