Apple Zaps Critical iTunes Security Bug

Apple has shipped iTunes 9.0.1to fix a critical security hole that puts Mac and Windows users at risk of computer takeover attacks. The vulnerability could be used by hackers to launch code execution attacks via booby-trapped “.pls” files, Apple warned in an advisory. The skinny: Impact: Opening ...

iTunes < 9.0.1 PLS File Buffer Overflow (Mac OS X)

The remote version of iTunes is older than 9.0.1. Such versions are affected by a buffer overflow involving the handling of PLS files. If an attacker can trick a user on the affected host into opening a malicious PLS file, he can leverage this issue to crash the affected application or to execute...

iTunes < 9.0.1 Remote Code Execution

Binary data 5182.prm...

Apple iTunes < 9.0.1 PLS File Buffer Overflow (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 9.0.1. It is, therefore, affected by a buffer overflow vulnerability involving the handling of PLS files. By convincing a user to open a specially crafted PSL file, a remote attacker can cause a denial of service or execute...

Apple iTunes < 9.0.1 PLS File Buffer Overflow (credentialed check)

The remote version of Apple iTunes is older than 9.0.1. Such versions are affected by a buffer overflow involving the handling of PLS files. If an attacker can trick a user on the affected host into opening a malicious PLS file, he can leverage this issue to crash the affected application or to...

Apple iTunes 9.0 - '.pls' Buffer Overflow

source: https://www.securityfocus.com/bid/36478/info Apple iTunes is prone to a buffer-overflow vulnerability because the software fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issue to execute arbitrary code within th...

Apple iTunes 9.0 - .pls Buffer Overflow

Apple iTunes 9.0 - .pls Buffer Overflow source: https://www.securityfocus.com/bid/36478/info Apple iTunes is prone to a buffer-overflow vulnerability because the software fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this...

Apple iTunes itms: URL buffer overflow

Added: 07/06/2009 CVE: CVE-2009-0950 BID: 35157 OSVDB: 54833 Background iTunes is a free media player for multiple platforms. Problem A buffer overflow vulnerability allows command execution when a user opens a specially crafted itms:// URL. Resolution Upgrade to iTunes 8.2 or higher. References...

Apple iTunes itms: URL buffer overflow

Added: 07/06/2009 CVE: CVE-2009-0950 BID: 35157 OSVDB: 54833 Background iTunes is a free media player for multiple platforms. Problem A buffer overflow vulnerability allows command execution when a user opens a specially crafted itms:// URL. Resolution Upgrade to iTunes 8.2 or higher. References...

Apple iTunes itms: URL buffer overflow

Added: 07/06/2009 CVE: CVE-2009-0950 BID: 35157 OSVDB: 54833 Background iTunes is a free media player for multiple platforms. Problem A buffer overflow vulnerability allows command execution when a user opens a specially crafted itms:// URL. Resolution Upgrade to iTunes 8.2 or higher. References...

Apple iTunes itms: URL buffer overflow

Added: 07/06/2009 CVE: CVE-2009-0950 BID: 35157 OSVDB: 54833 Background iTunes is a free media player for multiple platforms. Problem A buffer overflow vulnerability allows command execution when a user opens a specially crafted itms:// URL. Resolution Upgrade to iTunes 8.2 or higher. References...

iPhone 3.0 Includes 46 Security Patches

Apple’s latest iPhone OS 3.0 software updates includes patches for multiple vulnerabilities, some with serious security implications. The update, which is only available for download via iTunes, covers a total of 46 documented vulnerabilities, including several that allows malicious code executio...

Apple iTunes 8.1.1.10 (itms/itcp) Remote Buffer Overflow Exploit (win)

No description provided by source. !/usr/bin/python Apple iTunes 8.1.1.10 itms/itcp BOF Windows Exploit www.offensive-security.com/blog/vulndev/itunes-exploitation-case-study/ Matteo Memelli | ryujin A-T offensive-security.com Spaghetti & Pwnsauce - 06/10/2009 CVE-2009-0950...

Apple iTunes 8.1.1.10 (itms/itcp) Remote Buffer Overflow Exploit (win)

Exploit for windows platform in category remote exploits ====================================================================== Apple iTunes 8.1.1.10 itms/itcp Remote Buffer Overflow Exploit win ====================================================================== !/usr/bin/python Apple iTunes...

Apple iTunes 8.1.1.10 Buffer Overflow Exploit

!/usr/bin/python Apple iTunes 8.1.1.10 itms/itcp BOF Windows Exploit www.offensive-security.com/blog/vulndev/itunes-exploitation-case-study/ Matteo Memelli | ryujin A-T offensive-security.com Spaghetti & Pwnsauce - 06/10/2009 CVE-2009-0950 http://dvlabs.tippingpoint.com/advisory/TPTI-09-03...

Apple iTunes 8.1.1.10 (Windows) - itmsitcp Remote Buffer Overflow

Apple iTunes 8.1.1.10 Windows - itmsitcp Remote Buffer Overflow !/usr/bin/python Apple iTunes 8.1.1.10 itms/itcp BOF Windows Exploit www.offensive-security.com/blog/vulndev/itunes-exploitation-case-study/ Matteo Memelli | ryujin A-T offensive-security.com Spaghetti & Pwnsauce - 06/10/2009...

Apple iTunes 8.1.1.10 (Windows) - 'itms/itcp' Remote Buffer Overflow

!/usr/bin/python Apple iTunes 8.1.1.10 itms/itcp BOF Windows Exploit www.offensive-security.com/blog/vulndev/itunes-exploitation-case-study/ Matteo Memelli | ryujin A-T offensive-security.com Spaghetti & Pwnsauce - 06/10/2009 CVE-2009-0950 http://dvlabs.tippingpoint.com/advisory/TPTI-09-03...

Apple OS X iTunes 8.1.1 ITMS Overflow

This modules exploits a stack-based buffer overflow in iTunes itms:// URL parsing. It is accessible from the browser and in Safari, itms urls will be opened in iTunes automatically. Because iTunes is multithreaded, only vfork-based payloads should be used. This module requires Metasploit:...

Apple iTunes multiple security vulnerabilities

Buffer overflow on different URIs handling...

Apple iTunes 'itms:' URI Stack Buffer Overflow Vulnerability

This host has Apple iTunes installed, which is prone to stack based Buffer Overflow vulnerability. OpenVAS Vulnerability Test $Id: gbappleitunesbofvulnjun09.nasl 8169 2017-12-19 08:42:31Z cfischer $ Apple iTunes 'itms:' URI Stack Buffer Overflow Vulnerability Authors: Sharath S Copyright: Copyrig...