5758 matches found
iTunes m3u Playlist Overflow
Added: 07/03/2012 CVE: CVE-2012-0677 BID: 53933 OSVDB: 82897 Background iTunes is a free media player for multiple platforms. Problem iTunes does not properly validate parameters for EXTINF: directives in m3u files. This results in an exploitable stack overflow. Resolution Upgrade to iTunes 10.6....
Apple iTunes 10 - Extended M3U Stack Buffer Overflow (Metasploit)
This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework/ require 'msf/core' class Metasploit3 'Apple iTunes 10...
Apple iTunes 10 Extended M3U Stack Buffer Overflow
Exploit for windows platform in category remote exploits This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/framework...
Apple iTunes 10 Extended M3U Stack Buffer Overflow
This module exploits a stack buffer overflow in iTunes 10.4.0.80 to 10.6.1.7. When opening an extended .m3u file containing an "EXTINF:" tag description, iTunes will copy the content after "EXTINF:" without appropriate checking from a heap buffer to a stack buffer, writing beyond the stack buffer...
Apple iTunes <= 10.6.1.7 Extended m3u Stack Buffer Overflow Code Execution
Exploit for windows platform in category remote exploits ============================================================================================ Apple iTunes 'iTunes Extended M3U Stack Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in iTunes 10.4.0.80 to...
Apple iTunes 10.6.1.7 - Extended m3u Stack Buffer Overflow (Metasploit)
Apple iTunes 10.6.1.7 - Extended m3u Stack Buffer Overflow Metasploit ============================================================================================ Apple iTunes 'iTunes Extended M3U Stack Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in iTunes...
iTunes Extended M3U Stack Buffer Overflow
============================================================================================ Apple iTunes 'iTunes Extended M3U Stack Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in iTunes 10.4.0.80 to 10.6.1.7. When opening an extended .m3u file containing an...
Apple iTunes 10.6.1.7 - Extended m3u Stack Buffer Overflow (Metasploit)
============================================================================================ Apple iTunes 'iTunes Extended M3U Stack Buffer Overflow', 'Description' = %q This module exploits a stack buffer overflow in iTunes 10.4.0.80 to 10.6.1.7. When opening an extended .m3u file containing an...
iTunes < 10.6.3 Multiple Vulnerabilities
Binary data 6500.prm...
iTunes < 10.6.3 m3u Multiple Buffer Overflow Vulnerabilities (Mac OS X)
The version of iTunes installed on the remote Mac OS X host is earlier than 10.6.3 and is, therefore, affected by stack and heap based buffer overflow vulnerabilities. The application does not properly handle 'm3u' playlist files. This error can cause the application to crash or possibly allow...
Apple iTunes < 10.6.3 Multiple Vulnerabilities (credentialed check)
The version of Apple iTunes installed on the remote Windows host is older than 10.6.3 and is, therefore, affected by the following issues : - A memory corruption issue exists in WebKit that can allow malicious websites to crash the application and possibly to execute arbitrary code. CVE-2012-0672...
Apple iTunes < 10.6.3 Multiple Vulnerabilities (uncredentialed check)
The version of Apple iTunes on the remote Windows host is prior to version 10.6.3. It is, therefore, affected by the following vulnerabilities : - A memory corruption vulnerability exists in the WebKit component. By using a specially crafted website, an attacker can exploit this to cause a denial...
Apple iTunes执行任意代码和拒绝服务漏洞
CVE ID: CVE-2012-0672,CVE-2012-0677 iTunes是一款媒体播放器的应用程序，2001年1月10日由苹果电脑在旧金山的Macworld Expo推出，用来播放以及管理数字音乐和与视频文件，是管理苹果iPod的文件的主要工具。 Apple iTunes在捆绑的WebKit中存在有漏洞版本，并且在处理特制的M3U ".m3u"文件列表时存在错误可被利用造成堆缓冲区溢出，执行任意代码，从而控制用户系统。该漏洞不影响OS X Lion系统上的应用。 0 Apple iTunes 10.x 厂商补丁： Apple -----...
Apple iTunes 10.6.1.7 - .m3u Walking Heap Buffer Overflow (PoC)
Apple iTunes 10.6.1.7 - .m3u Walking Heap Buffer Overflow PoC !/usr/bin/perl Apple iTunes 10.6.1.7 M3U Playlist File Walking Heap Buffer Overflow Vendor: Apple Inc. Product web page: http://www.apple.com Affected version: 10.6.1.7 and 10.6.0.40 Summary: iTunes is a free application for your Mac o...
Apple iTunes 10.6.1.7 M3U Playlist File Walking Heap Buffer Overflow
Exploit for multiple platform in category dos / poc !/usr/bin/perl Apple iTunes 10.6.1.7 M3U Playlist File Walking Heap Buffer Overflow Vendor: Apple Inc. Product web page: http://www.apple.com Affected version: 10.6.1.7 and 10.6.0.40 Summary: iTunes is a free application for your Mac or PC. It...
Apple iTunes 10.6.1.7 - '.m3u' Walking Heap Buffer Overflow (PoC)
!/usr/bin/perl Apple iTunes 10.6.1.7 M3U Playlist File Walking Heap Buffer Overflow Vendor: Apple Inc. Product web page: http://www.apple.com Affected version: 10.6.1.7 and 10.6.0.40 Summary: iTunes is a free application for your Mac or PC. It lets you organize and play digital music and video on...
CVE-2012-0677
Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted .m3u playlist...
Immunity Canvas: ITUNES_10_6_1
Name| Itunes1061 ---|--- CVE| CVE-2012-0677 Exploit Pack| CANVAS Description| Itunes 10.4 to 10.6.1 Buffer Overflow Notes| CVE Name: CVE-2012-0677 VENDOR: Apple Notes: Buffer overflow SEH based for Itunes 10.4 to 10.6.1 on Windows XP SP2 VersionsAffected: Itunes 10.4 to 10.6.1 Repeatability:...
Heap overflow
Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted .m3u playlist...
