Apple iTunes 'itms:' URI Stack Buffer Overflow Vulnerability (HT3592)

Apple iTunes is prone to a stack based buffer overflow vulnerability. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE =...

Apple iTunes itms: URI栈溢出漏洞

BUGTRAQ ID: 35157 CVECAN ID: CVE-2009-0950 Apple iTunes是一款媒体播放程序。 如果用户使用iTunes打开了恶意的itms: URL的话，就可能触发栈溢出，导致播放器崩溃或执行任意代码。 Apple iTunes 8.2 厂商补丁： Apple ----- 目前厂商已经发布了升级补丁以修复这个安全问题，请到厂商的主页下载： http://www.apple.com/itunes/download/...

Apple iTunes 8.1.1 - 'ITMS' Multiple Protocol Handler Buffer Overflow (Metasploit)

$Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use. http://metasploit.com/projects/Framework/ require 'msf/core' class Metasploit3...

Apple iTunes 8.1.1 (ITMS) Multiple Protocol Handler BOF Exploit (meta)

Exploit for macOS platform in category remote exploits ====================================================================== Apple iTunes 8.1.1 ITMS Multiple Protocol Handler BOF Exploit meta ====================================================================== $Id: $ This file is part of the...

Apple iTunes 8.1.1 - ITMS Multiple Protocol Handler Buffer Overflow (Metasploit)

Apple iTunes 8.1.1 - ITMS Multiple Protocol Handler Buffer Overflow Metasploit $Id: $ This file is part of the Metasploit Framework and may be subject to redistribution and commercial restrictions. Please see the Metasploit Framework web site for more information on licensing and terms of use...

Stack overflow

Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via an itms: URL with a long URL component after a colon...

CVE-2009-0950

Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via an itms: URL with a long URL component after a colon...

CVE-2009-0950

Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service application crash via an itms: URL with a long URL component after a colon...

CVE-2009-0950

The CVE-2009-0950 issue is a stack-based buffer overflow in Apple iTunes' itms URL parser. A remote attacker could trigger it by delivering a crafted itms: URL containing a long URL component after the colon, e.g., via a malicious webpage, causing an application crash or arbitrary code execution ...

iTunes < 8.2 itms: URL Stack Overflow (Mac OS X)

The remote version of iTunes is older than 8.2. Such versions are affected by a stack-based buffer overflow that can be triggered when parsing 'itms:' URLs. If an attacker can trick a user on the affected host into clicking on a malicious link, he can leverage this issue to crash the affected...

Apple iTunes < 8.2 itms: URI Handling Overflow (credentialed check)

The remote version of Apple iTunes is older than 8.2. Such versions are affected by a stack-based buffer overflow that can be triggered when parsing 'itms:' URLs. If an attacker can trick a user on the affected host into clicking on a malicious link, he can leverage this issue to crash the affect...

Apple iTunes < 8.2 itms: URI Handling Overflow (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 8.2. It is, therefore, affected by a stack-based buffer overflow that can be triggered when parsing 'itms:' URLs. By convincing a user to click on a specially crafted link, a remote attacker can cause a denial of service or execut...

Apple iTunes Multiple Vulnerabilities

Apple iTunes is prone to multiple vulnerabilities. SPDX-FileCopyrightText: 2009 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only CPE = "cpe:/a:apple:itunes"; ifdescription...

Apple iTunes DoS

DoS with DAAP messages...

Apple iTunes DAAP Messages Handling Denial of Service Vulnerability

Apple iTunes DAAP Messages Handling Denial of Service Vulnerability   2009.Mar.13  Fortinet's FortiGuard Global Security Research Team Discovers Vulnerability in Apple iTunes Summary:  ======== A DoS vulnerability in Apple iTunes through a maliciously crafted DAAP message. Impact: ======...

CVE-2009-0143

Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to trick a user into providing a username and password when subscribing to a crafted podcast...

Authentication flaw

Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to trick a user into providing a username and password when subscribing to a crafted podcast...

Design/Logic Flaw

Apple iTunes before 8.1 on Windows allows remote attackers to cause a denial of service infinite loop via a Digital Audio Access Protocol DAAP message with a crafted Content-Length header...

CVE-2009-0016

Apple iTunes before 8.1 on Windows allows remote attackers to cause a denial of service infinite loop via a Digital Audio Access Protocol DAAP message with a crafted Content-Length header...

CVE-2009-0143

Apple iTunes before 8.1 does not properly inform the user about the origin of an authentication request, which makes it easier for remote podcast servers to trick a user into providing a username and password when subscribing to a crafted podcast...