Apple iTunes DAAP Messages Handling Denial of Service Vulnerability

Apple iTunes DAAP Messages Handling Denial of Service Vulnerability   2009.Mar.13  Fortinet's FortiGuard Global Security Research Team Discovers Vulnerability in Apple iTunes Summary:  ======== A DoS vulnerability in Apple iTunes through a maliciously crafted DAAP message. Impact: ======...

CVE-2009-0016

Apple iTunes for Windows before 8.1 is vulnerable to a Denial of Service caused by processing a DAAP message with a crafted Content-Length header, leading to an infinite loop/crash. The issue affects iTunes on Windows (pre-8.1); remediation is to upgrade to iTunes 8.1 or later. (Based on CVE-2009...

Apple iTunes < 8.1 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 8.1. Such versions may be affected by multiple vulnerabilities : - It may be possible to cause a denial of service by sending a maliciously crafted DAAP header to the application. CVE-2009-0016 - When subscribing to a...