Heap overflow

Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service application crash or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file...

CVE-2007-3752

Apple iTunes

CVE-2007-3752

Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service application crash or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file...

iTunes < 7.4.0 MP4/AAC File covr atom Overflow

Binary data 4204.prm...

Apple QuickTime / iTunes multiple vulnerabilities

Heap overflow on GIF images parsing, stack overflow on QTIF parsing, heap overflow on video samples parsing...

Apple QuickTime movie heap buffer overflow vulnerability

Overview The Apple QuickTime player contains a heap buffer overflow vulnerability. This vulnerability may allow an attacker to execute arbitrary code or create a denial-of-service condition. Description Apple QuickTime contains a heap buffer overflow vulnerability. This vulnerability may allow an...

Memory corruption

Apple iTunes 7.0.2 allows user-assisted remote attackers to cause a denial of service application crash via a crafted XML list of radio stations, which results in memory corruption. NOTE: iTunes retrieves the XML document from a static URL, which requires an attacker to perform DNS spoofing or...

CVE-2007-1008

Apple iTunes 7.0.2 allows user-assisted remote attackers to cause a denial of service application crash via a crafted XML list of radio stations, which results in memory corruption. NOTE: iTunes retrieves the XML document from a static URL, which requires an attacker to perform DNS spoofing or...

CVE-2007-1008

Apple iTunes 7.0.2 allows user-assisted remote attackers to cause a denial of service application crash via a crafted XML list of radio stations, which results in memory corruption. NOTE: iTunes retrieves the XML document from a static URL, which requires an attacker to perform DNS spoofing or...

CVE-2007-1008

Apple iTunes 7.0.2 is affected by CVE-2007-1008 where a crafted XML list of radio stations can cause a denial of service via memory corruption. The issue is user‑assisted remote in nature and relies on the XML document being retrieved from a static URL, which implies an attacker must perform DNS ...

Apple iTunes DoS

NULL pointer crash on xml parsing...

iTunes remote memory corruption vulnerability

Hi, iTunes for both macosx and win is prone to a remote memory corruption vulnerability when parsing xml. iTunes will parse xml when it contacts a touning server which will return the list of radio channels in that format. To trigger this bug is sufficent to send to iTunes an xml file containing...

Apple iTunes 7.0.2 - XML Parsing Remote Denial of Service

Apple iTunes 7.0.2 - XML Parsing Remote Denial of Service source: https://www.securityfocus.com/bid/22615/info Apple iTunes is prone to a remote denial-of-service vulnerability because the application fails to handle malformed XML playlist files. An attacker can exploit this issue to crash the...

Apple iTunes 7.0.2 - XML Parsing Remote Denial of Service

source: https://www.securityfocus.com/bid/22615/info Apple iTunes is prone to a remote denial-of-service vulnerability because the application fails to handle malformed XML playlist files. An attacker can exploit this issue to crash the application, triggering a denial-of-service condition. Apple...

Apple ITunes 4.7 Playlist Buffer Overflow

This module exploits a stack buffer overflow in Apple ITunes 4.7 build 4.7.0.42. By creating a URL link to a malicious PLS file, a remote attacker could overflow a buffer and execute arbitrary code. When using this module, be sure to set the URIPATH with an extension of '.pls'. This module requir...

iTunes Client Detection

Binary data 3820.prm...

iTunes Detection (deprecated)

Binary data 3819.prm...

ZDI-06-020: Apple iTunes AAC File Parsing Integer Overflow Vulnerability

ZDI-06-020: Apple iTunes AAC File Parsing Integer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-020.html June 29, 2006 -- CVE ID: CVE-2006-1467 -- Affected Vendor: Apple -- Affected Products: iTunes -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers...

Apple iTunes integer overflow

Inter overflow on AAC files parsing .M4A, .M4P with invalid samplesizetable value...

Apple iTunes AAC File Parsing Integer Overflow (credentialed check)

The remote host is running Apple iTunes, a popular media player. The remote version of iTunes is vulnerable to an integer overflow when it parses a specially crafted AAC file. By tricking a user into opening such a file, a remote attacker may be able to leverage this issue to execute arbitrary co...