iTunes < 9.1 Multiple Vulnerabilities

Binary data 5491.prm...

iTunes < 9.1 Multiple Vulnerabilities (Mac OS X)

The remote version of iTunes is older than 9.1. Such versions are potentially affected by multiple vulnerabilities : - An infinite loop in the application's handling of imported MP4 podcast files may lead to an application crash and prevent subsequent operation. CVE-2010-0531 - Syncing a mobile...

Apple iTunes for Windows privilege escalation

Application is launched with LocalSystem rights from user-writable folder, allowing DLL spoofing...

Apple iTunes < 9.1 Multiple Vulnerabilities (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 9.1. It is, therefore, affected by multiple vulnerabilities : - A buffer underflow in ImageIO's handling of TIFF images can lead to a denial of service or arbitrary code execution. CVE-2009-2285 - An integer overflow in the...

Apple iTunes < 9.1 Multiple Vulnerabilities (credentialed check)

The version of Apple iTunes installed on the remote Windows host is older than 9.1. Such versions may be affected by multiple vulnerabilities : - A buffer underflow in ImageIO's handling of TIFF images may lead to an application crash or arbitrary code execution. CVE-2009-2285 - An integer overfl...

CVE-2010-0043

ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted TIFF image...

CVE-2010-0042

ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memory, which allows remote attackers to obtain potentially sensitive information from process memory via a crafted TIFF image...

CVE-2010-0041

ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memory, which allows remote attackers to obtain potentially sensitive information from process memory via a crafted BMP image...

CVE-2010-0040

Integer overflow in ColorSync in Apple Safari before 4.0.5 on Windows, and iTunes before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service application crash via an image with a crafted color profile that triggers a heap-based buffer overflow...

Memory corruption

ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted TIFF image...

Integer overflow

Integer overflow in ColorSync in Apple Safari before 4.0.5 on Windows, and iTunes before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service application crash via an image with a crafted color profile that triggers a heap-based buffer overflow...

Design/Logic Flaw

ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memory, which allows remote attackers to obtain potentially sensitive information from process memory via a crafted BMP image...

Code injection

ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memory, which allows remote attackers to obtain potentially sensitive information from process memory via a crafted TIFF image...

CVE-2010-0041

CVE-2010-0041 affects ImageIO’s handling of BMP images in Apple Safari (Windows) before 4.0.5 and iTunes before 9.1. The underlying issue is an uninitialized memory access in BMP processing, which could cause sensitive memory data to be exposed to a remote website via a crafted BMP image. The vul...

CVE-2010-0043

CVE-2010-0043 : The vulnerability stems from a memory corruption flaw in ImageIO’s handling of TIFF images. It affects Apple Safari prior to 4.0.5 and iTunes prior to 9.1 on Windows, where a crafted TIFF image could be used by an attacker to execute arbitrary code or cause a denial of service (ap...

CVE-2010-0040

CVE-2010-0040 arises from an integer overflow in ColorSync when processing images with an embedded color profile, causing a heap-based buffer overflow. Affected products include Apple Safari on Windows (pre-4.0.5) and iTunes before 9.1. Impact: remote code execution or an application crash. The i...

CVE-2010-0042

ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows does not ensure that memory access is associated with initialized memory, which allows remote attackers to obtain potentially sensitive information from process memory via a crafted TIFF image...

CVE-2010-0040

Integer overflow in ColorSync in Apple Safari before 4.0.5 on Windows, and iTunes before 9.1, allows remote attackers to execute arbitrary code or cause a denial of service application crash via an image with a crafted color profile that triggers a heap-based buffer overflow...

CVE-2010-0043

ImageIO in Apple Safari before 4.0.5 and iTunes before 9.1 on Windows allows remote attackers to execute arbitrary code or cause a denial of service memory corruption and application crash via a crafted TIFF image...

CVE-2010-0042

CVE-2010-0042 affects ImageIO TIFF handling in Apple Safari (Windows: before 4.0.5) and iTunes (before 9.1). The root cause is an uninitialized memory access in ImageIO’s TIFF processing that could allow a remote attacker to obtain memory contents from the process via a crafted TIFF image. The im...