iTunes < 9.1 Multiple Vulnerabilities

Binary data 5491.prm...

CVE-2010-0042

ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memory, which allows remote attackers to obtain potentially sensitive information from process memory via a crafted TIFF image...

CVE-2010-0042

CVE-2010-0042 affects ImageIO TIFF handling in Apple Safari (Windows: before 4.0.5) and iTunes (before 9.1). The root cause is an uninitialized memory access in ImageIO’s TIFF processing that could allow a remote attacker to obtain memory contents from the process via a crafted TIFF image. The im...