critical9.3Public exploit code
CVE-2012-0677
Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- Apple iTunes 10 - Extended M3U Stack Buffer Overflow (Metasploit)2012-06-25 · remote · windows · Verified
- Apple iTunes 10.6.1.7 - '.m3u' Walking Heap Buffer Overflow (PoC)2012-06-13 · dos · multiple · Verified
Impact
Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .m3u playlist.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Itunes | through 10.6.1 Versions 10.0, 10.0.1, 10.1, 10.1.1, 10.1.1.4 |
Weakness classification
References
- NVD record
- CVE.org record
- http://lists.apple.com/archives/security-announce/2012/Jun/msg00000.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17016
- http://lists.apple.com/archives/security-announce/2012/Jun/msg00000.html
- https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17016