Apple iTunes < 8.0 Integer Buffer Overflow (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 8.0. It is, therefore, affected by an integer buffer overflow vulnerability in an included third party driver. A local user can exploit this to gain system privileges. C Tenable Network Security, Inc. include"compat.inc"; if...

iTunes < 8.0 Multiple Vulnerabilities

Binary data 4653.prm...

CVE-2008-3434

Apple iTunes before 10.5.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

Design/Logic Flaw

Apple iTunes before 10.5.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

CVE-2008-3434

Apple iTunes

CVE-2008-3434

Apple iTunes before 10.5.1 does not properly verify the authenticity of updates, which allows man-in-the-middle attackers to execute arbitrary code via a Trojan horse update, as demonstrated by evilgrade and DNS cache poisoning...

Apple iTunes Playlist Buffer Overflow Download Shellcoded Exploit

No description provided by source. / Apple iTunes Playlist Buffer Overflow Download Shellcoded Exploit Bug discoveried by iDEFENSE Security http://www.idefense.com Exploit coded By ATmaCA Copyright ?2002-2005 AtmacaSoft Inc. All Rights Reserved. Web: http://www.atmacasoft.com E-Mail:...

Apple iTunes Playlist Local Parsing Buffer Overflow Exploit

No description provided by source. / PoC for iTunes on OS X 10.3.7 - [email protected] - Generates a .pls file, when loaded in iTunes it binds a shell to port 4444. Shellcode contains no \x00 or \x0a's. sample output: -nemo@gir:$ ./fm-eyetewnz foo.pls - fm-eyetewnz - - [email protected] -...

[SECURITY] Fedora 9 Update: mt-daapd-0.2.4.2-2.fc9

The purpose of this project is built the best server software to serve digital music to the Roku Soundbridge and iTunes; to be able to serve the widest variety of digital music content over the widest range of devices...

[SECURITY] Fedora 8 Update: mt-daapd-0.9-0.4.1696.fc8

The purpose of this project is built the best server software to serve digital music to the Roku Soundbridge and iTunes; to be able to serve the widest variety of digital music content over the widest range of devices...

Apple QuickTime RTSP Response message Reason-Phrase buffer overflow vulnerability

Overview Apple QuickTime contains a buffer overflow vulnerability that may allow a remote, unauthenticated attacker to cause a denial-of-service condition and possibly execute arbitrary code. Description Real Time Streaming Protocol RTSP is a protocol that is used by streaming media systems. Appl...

Firefly Media Server (mt-daapd) 2.4.1 / SVN 1699 Multiple Vulnerabilities

No description provided by source. Luigi Auriemma Application: Firefly Media Server mt-daapd http://www.fireflymediaserver.org Versions: = 2.4.1 and SVN = 1699 Platforms: nix, Windows, Mac and others...

0DAY: QuickTime pwns Firefox

0DAY: QuickTime pwns Firefox published: September 12th, 2007 It seams that QuickTime media formats can hack into Firefox. The result of this vulnerability can lead to full compromise of the browser and maybe even the underlaying operating system. Don’t try this at home. 300 movie trailer Before w...

Apple iTunes buffer overflow

Buffer overflow on MP4 / AAC files covr tag parsing...

iTunes 7.3.x - Heap overflow in album cover parsing

iSEC Partners Security Advisory - 2007-005-itunes https://www.isecpartners.com -------------------------------------------- iTunes 7.3.x - Heap overflow in album cover parsing Vendor: Apple, Inc. Vendor URL: http://www.apple.com Versions affected: Confirmed in iTunes 7.3.2 Systems Affected:...

Apple iTunes Version Detection (credentialed check)

Apple iTunes, a popular media player, is installed on the remote Windows host. C Tenable Network Security, Inc. include"compat.inc"; if description scriptid25996; scriptversion"1.23"; scriptsetattributeattribute:"pluginmodificationdate", value:"2024/10/31"; scriptnameenglish:"Apple iTunes Version...

Apple iTunes < 7.4 Malformed Music File Heap Overflow (uncredentialed check)

The version of Apple iTunes on the remote host is prior to version 7.4. It is, therefore, affected by a heap overflow vulnerability when it parses specially crafted MP4/AAC files. By convincing a user into opening such a file, a remote attacker can execute arbitrary code with the same level of...

Apple iTunes < 7.4 Malformed Music File Heap Overflow (credentialed check)

The remote host is running Apple iTunes, a popular media player. The remote version of iTunes is vulnerable to a heap overflow when it parses a specially crafted MP4/AAC file. By tricking a user into opening such a file, a remote attacker may be able to leverage this issue to execute arbitrary co...

iTunes < 7.4 Malformed Music File Heap Overflow (Mac OS X)

The remote host is running iTunes, a popular jukebox program. The remote version of iTunes is vulnerable to a heap overflow when it parses a specially crafted MP4/AAC file. By tricking a user into opening such a file, a remote attacker may be able to leverage this issue to execute arbitrary code ...

CVE-2007-3752

Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service application crash or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file...