iTunes < 7.4.0 MP4/AAC File covr atom Overflow

Binary data 4204.prm...

CVE-2007-3752: Improper Restriction of Operations within the Bounds of a Memory Buffer

Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service application crash or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file...