Apple iTunes < 9.2 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 9.2. It is, therefore, affected by multiple vulnerabilities : - A heap-based buffer overflow vulnerability exists in the handling of images with an embedded ColorSync profile. By using a specially crafted image, a remote attacker...

iTunes < 9.2 Multiple Vulnerabilities

Binary data 5573.prm...

Apple iTunes < 9.2 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 9.2. As such, it may be affected by multiple vulnerabilities : - A heap-based buffer overflow in the handling of images with an embedded ColorSync profile may lead to an application crash or arbitrary code execution...

Apple Releases iTunes 9.2

Apple has released iTunes 9.2 for Windows systems to address multiple vulnerabilities affecting the ColorSync, ImageIO, and WebKit packages. These vulnerabilities may allow an attacker to execute arbitrary code or cause a denial-of-service condition. US-CERT encourages users and administrators to...

Apple iTunes 4.7 - Playlist Buffer Overflow (Metasploit)

$Id: appleitunesplaylist.rb 9262 2010-05-09 17:45:00Z jduck $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Apple iTunes PLS File Parsing Buffer Overflow (CVE-2009-2817)

Apple iTunes is a multimedia player that supports a wide range of media formats. One of the file formats supported by Apple iTunes is the PLS file format. PLS is a computer file format that stores multimedia playlists. A buffer overflow vulnerability has been reported in Apple iTunes. The error i...

Don Bailey and Nick D' on GSM Hacking and Privacy

Dennis Fisher talks with Don Bailey of iSec Partners and Nick D’, an independent security researcher, about their recent work on geolocation and tracking of GSM mobile handsets and the privacy and security implications for users. Podcast audio courtesy of sykboy65 Subscribe to the Digital...

Apple QuickTime/iTunes multiple security vulnerabilities

Multiple vulnerabilities on FLC, PICT and multiple graphics and video formats parsing...

Apple iTunes Multiple Vulnerabilities - Apr10

This host has iTunes installed, which is prone to multiple vulnerabilities. OpenVAS Vulnerability Test $Id: gbappleitunesmultvulnapr10.nasl 8169 2017-12-19 08:42:31Z cfischer $ Apple iTunes Multiple Vulnerabilities - Apr10 Authors: Antu Sanadi Copyright: Copyright c 2010 Greenbone Networks GmbH,...

Apple iTunes Multiple Vulnerabilities (APPLE-SA-2010-03-30-2)

Apple iTunes is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2010 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...

VUPEN Security Research - Apple iTunes ColorSync Profile Integer Overflow Vulnerability

VUPEN Security Research - Apple iTunes ColorSync Profile Integer Overflow Vulnerability http://www.vupen.com/english/research.php I. BACKGROUND --------------------- "iTunes is a free application for Mac or PC. It organizes and plays digital music and video on computers. It syncs all media files...

Apple Plugs Gaping Holes in QuickTime, iTunes

Just call it Mac OS X patchapalooza. Over the last week, Apple has shipped security patches to cover 88 vulnerabilities in the Mac operating system, 16 holes in the QuickTime media player, 7 flaws in iTunes and a security bug in the AirPort Base Station. In the days following the release of the M...

CVE-2010-0531

Apple iTunes before 9.1 allows remote attackers to cause a denial of service infinite loop via a crafted MP4 podcast file...

Race condition

Race condition in the installation package in Apple iTunes before 9.1 on Windows allows local users to gain privileges by replacing an unspecified file with a Trojan horse...

Design/Logic Flaw

Apple iTunes before 9.1 allows remote attackers to cause a denial of service infinite loop via a crafted MP4 podcast file...

CVE-2010-0531

Apple iTunes before 9.1 allows remote attackers to cause a denial of service infinite loop via a crafted MP4 podcast file...

CVE-2010-0531

CVE-2010-0531 affects Apple iTunes before 9.1. A crafted MP4 podcast file can trigger an infinite loop in iTunes’ handling of MP4s, causing a denial of service. The issue is mitigated by upgrading to iTunes 9.1 or later, which Apple states fixes involve improved MP4 validation. No exploit details...

CVE-2010-0532

Race condition in the installation package in Apple iTunes before 9.1 on Windows allows local users to gain privileges by replacing an unspecified file with a Trojan horse...

CVE-2010-0532

Apple iTunes for Windows prior to version 9.1 is affected by a race-condition vulnerability in the installation package that can let a local user replace a file and gain SYSTEM privileges during install. Root cause: race condition during installation; impact: local privilege escalation. Remediati...

Elevation of Privilege Vulnerability in iTunes for Windows

Elevation of Privilege Vulnerability in iTunes for Windows ---------------------------------------------------------- March 31th, 2010 ======= Summary ======= Name: Elevation of Privilege Vulnerability in iTunes for Windows Release Date: March 31th, 2010 Discoverer: Jason Geffner Vendor: Apple In...