70 matches found
Apple iTunes DAAP Messages Handling Denial of Service Vulnerability
Apple iTunes DAAP Messages Handling Denial of Service Vulnerability 2009.Mar.13 Fortinet's FortiGuard Global Security Research Team Discovers Vulnerability in Apple iTunes Summary: ======== A DoS vulnerability in Apple iTunes through a maliciously crafted DAAP message. Impact: ======...
Design/Logic Flaw
Apple iTunes before 8.1 on Windows allows remote attackers to cause a denial of service infinite loop via a Digital Audio Access Protocol DAAP message with a crafted Content-Length header...
CVE-2009-0016
Apple iTunes for Windows before 8.1 is vulnerable to a Denial of Service caused by processing a DAAP message with a crafted Content-Length header, leading to an infinite loop/crash. The issue affects iTunes on Windows (pre-8.1); remediation is to upgrade to iTunes 8.1 or later. (Based on CVE-2009...
Apple iTunes信息泄露和拒绝服务漏洞
BUGTRAQ ID: 34094 CVECAN ID: CVE-2009-0016,CVE-2009-0143 Apple iTunes是一款媒体播放程序。 iTunes在处理数字音频访问协议（DAAP）消息时存在死循环，如果远程攻击者在发送的消息的DAAP头中包含了特制的Content-Length参数的话就会导致播放器崩溃。 iTunes的podcast功能中存在设计错误，订阅到恶意的podcast可能会向用户显示认证对话框，该对话框可诱骗用户向podcast服务器发送iTunes凭据。 Apple iTunes 8.0 厂商补丁： Apple -----...
Apple iTunes < 8.1 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes on the remote host is prior to version 8.1. It is, therefore, affected by multiple vulnerabilities : - A remote attacker can cause a denial of service by sending a maliciously crafted DAAP message. Note that this vulnerability only affects iTunes running on a Windows...
Apple iTunes < 8.1 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is older than 8.1. Such versions may be affected by multiple vulnerabilities : - It may be possible to cause a denial of service by sending a maliciously crafted DAAP header to the application. CVE-2009-0016 - When subscribing to a...
GLSA-200712-18 : Multi-Threaded DAAP Daemon: Multiple vulnerabilities
The remote host is affected by the vulnerability described in GLSA-200712-18 Multi-Threaded DAAP Daemon: Multiple vulnerabilities nnp discovered multiple vulnerabilities in the XML-RPC handler in the file webserver.c. The wsaddarg function contains a format string vulnerability, as it does not...
Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699 Multiple Vulnerabilities
No description provided by source. Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others...
Multiple vulnerabilities in Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699
Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others Bugs: A partial directory traversal on Windows B authentication bypass on Windows C duplicated HTTP parameter Denial of Service D CP...
Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699 Multiple Vulnerabilities
Exploit for unknown platform in category remote exploits ========================================================================= Firefly Media Server mt-daapd 2.4.1 / SVN 1699 Multiple Vulnerabilities ========================================================================= Luigi Auriemma...