CVE-2010-1795

Apple iTunes for Windows before version 9.1 is affected by CVE-2010-1795, a DLL preloading/path-searching vulnerability. If a malicious DLL with a specific name is present in the current working directory, and a user opens another file in that directory, iTunes may load and execute the attacker’s...

CVE-2010-1795

Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote attackers to gain privileges via a Trojan horse DLL in the current working directory...

CVE-2010-1768

Unspecified vulnerability in Apple iTunes before 9.1 allows local users to gain console privileges via vectors related to log files, "insecure file operation," and syncing an iPhone, iPad, or iPod touch...

About the security content of iTunes 9.1

About the security content of iTunes 9.1 Last Modified: August 12, 2010 Article: HT4105 Email this article Print this page Summary This document describes the security content of iTunes 9.1. For the protection of our customers, Apple does not disclose, discuss, or confirm security issues until a...

ACROS Security: Remote Binary Planting in Apple iTunes for Windows (ASPR #2010-08-18-1)

=====BEGIN-ACROS-REPORT===== PUBLIC ========================================================================= ACROS Security Problem Report 2010-08-18-1 ------------------------------------------------------------------------- ASPR 2010-08-18-1: Remote Binary Planting in Apple iTunes for Windows...

Apple iTunes multiple security uvlnerabilities

Multiple memory corruptions on different media formats parsing, privilege escalations, code exeecution from network shares...

Apple iTunes 9.00.70 / 9.2.15 Cross Site Scripting

+===============================================================================+ + © 2000–2010 Itunes 9 & XSS Vulnerabilities + +===============================================================================+ Authors: Ivan Sanchez Date: 31/07/2010 Product: Itunes 9 Web:...

CVE-2010-1777

Buffer overflow in Apple iTunes before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted itpc: URL...

Buffer overflow

Buffer overflow in Apple iTunes before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted itpc: URL...

CVE-2010-1777

The CVE describes a buffer overflow in Apple iTunes (versions before 9.2.1) that can be triggered by handling of itpc: URLs, allowing remote code execution or a denial of service. Connected sources confirm affected platforms include Windows and Mac OS X with iTunes prior to 9.2.1 exposing the vul...

CVE-2010-1777

Buffer overflow in Apple iTunes before 9.2.1 allows remote attackers to execute arbitrary code or cause a denial of service application crash via a crafted itpc: URL...

Apple iTunes 'itpc:' URI Buffer Overflow Vulnerability

This host has iTunes installed, which is prone to buffer overflow vulnerability. OpenVAS Vulnerability Test $Id: gbappleitunesbofvulnjul10.nasl 8169 2017-12-19 08:42:31Z cfischer $ Apple iTunes 'itpc:' URI Buffer Overflow Vulnerability Authors: Madhuri D Copyright: Copyright c 2010 Greenbone...

Apple iTunes 'itpc:' URI Buffer Overflow Vulnerability

iTunes is prone to a buffer overflow vulnerability. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...

Apple iTunes < 9.2.1 'itpc:' Buffer Overflow (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 9.2.1. Such versions may be affected by a buffer overflow vulnerability in the handling of 'itpc:' URLs that could allow an attacker to execute arbitrary code on the remote host. To exploit this vulnerability, an...

iTunes < 9.2.1 'itpc:' Buffer Overflow Vulnerability

Binary data 5605.prm...

Apple Releases iTunes 9.2.1

Apple has released iTunes 9.2.1 to address a vulnerability. This vulnerability is due to improper handling of itpc URLs. itpc is the protocol used by Apple iTunes for handling podcasts. By convincing a user to access a specially crafted itpc URL, an attacker may be able to execute arbitrary code ...

Apple iTunes < 9.2.1 'itpc:' Buffer Overflow (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 9.2.1. It is, therefore, affected by a buffer overflow vulnerability in the handling of 'itpc:' URLs. By convincing a user to click on a specially crafted link, a remote attacker can cause a denial of service or execute arbitrary...

iTunes < 9.2.1 'itpc:' Buffer Overflow (Mac OS X)

The version of iTunes installed on the remote Mac OS X host is older than 9.2.1. Such versions may be affected by a buffer overflow vulnerability in the handling of 'itpc:' URLs which may allow an attacker to execute arbitrary code on the remote host. To exploit this vulnerability, an attacker...

Apple Ships Critical iTunes for Windows Patch

Apple has shipped a critical iTunes update to fix a security vulnerability that exposes Windows users to malicious hacker attacks. The latest iTunes 9.2.1 is available for Windows XP, Windows Vista and Windows 7. From Apple’s advisory: A buffer overflow exists in the handling of “itpc:”URLs...

Apple iTunes Multiple Unspecified Vulnerabilities

This host has iTunes installed, which is prone to multiple unspecified vulnerabilities. OpenVAS Vulnerability Test $Id: secpodappleitunesmultunspecifiedvuln.nasl 8169 2017-12-19 08:42:31Z cfischer $ Apple iTunes Multiple Unspecified Vulnerabilities Authors: Antu Sanadi Copyright: Copyright c 2010...