5758 matches found
ZDI-06-020: Apple iTunes AAC File Parsing Integer Overflow Vulnerability
ZDI-06-020: Apple iTunes AAC File Parsing Integer Overflow Vulnerability http://www.zerodayinitiative.com/advisories/ZDI-06-020.html June 29, 2006 -- CVE ID: CVE-2006-1467 -- Affected Vendor: Apple -- Affected Products: iTunes -- TippingPointTM IPS Customer Protection: TippingPoint IPS customers...
Apple iTunes integer overflow
Inter overflow on AAC files parsing .M4A, .M4P with invalid samplesizetable value...
Apple iTunes AAC File Parsing Integer Overflow (credentialed check)
The remote host is running Apple iTunes, a popular media player. The remote version of iTunes is vulnerable to an integer overflow when it parses a specially crafted AAC file. By tricking a user into opening such a file, a remote attacker may be able to leverage this issue to execute arbitrary co...
Apple iTunes fails to properly parse AAC files
Overview Apple iTunes does not properly parse AAC files. This vulnerability may allow a remote attacker to execute arbitrary code. Description Apple iTunes Apple iTunes is a digital media player available for the Microsoft Windows and Mac OS X operating systems. Advanced Audio Coding AAC file...
Apple iTunes AAC File Parsing Integer Overflow (uncredentialed check)
The version of Apple iTunes running on the remote host is affected by an integer overflow vulnerability when it parses specially crafted AAC files. By convincing a user to open such a file, a remote attacker can execute arbitrary code with the same level of privileges as the user. C Tenable Netwo...
Integer overflow
Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remote user-assisted attackers to execute arbitrary code via an AAC M4P, M4A, or M4B file with a sample table size STSZ atom with a "malformed" samplesizetable...
CVE-2006-1467
Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remote user-assisted attackers to execute arbitrary code via an AAC M4P, M4A, or M4B file with a sample table size STSZ atom with a "malformed" samplesizetable...
CVE-2006-1467
Apple iTunes prior to 6.0.5 on macOS 10.2.8+ and Windows XP/2000 is affected by an integer overflow in the AAC file parser (STSZ sample_size_table) that can lead to remote code execution when a user opens a crafted AAC file. Exploitation requires user action and would run with the caller’s privil...
CVE-2006-1467
Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remote user-assisted attackers to execute arbitrary code via an AAC M4P, M4A, or M4B file with a sample table size STSZ atom with a "malformed" samplesizetable...
iTunes < 6.0.5 AAC File Parsing Overflow
Binary data 3671.prm...
Apple iTunes AAC File Parsing Integer Overflow Vulnerability
This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Apple iTunes. Exploitation requires an attacker to convince a target user into opening a malicious play list file. The specific flaw exists during the processing of malicious AAC media files such as those...
iTunes < 6.0.5 AAC File Integer Overflow (Mac OS X)
The remote host is running iTunes, a popular jukebox program. The remote version of this software is vulnerable to an integer overflow when it parses specially crafted AAC files which may lead to the execution of arbitrary code. An attacker may exploit this flaw by sending a malformed AAC file to...
CVE-2006-1249
Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows remote attackers to execute arbitrary code via a FlashPix FPX image that contains a field that specifies a large number of blocks...
Integer overflow
Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows remote attackers to execute arbitrary code via a FlashPix FPX image that contains a field that specifies a large number of blocks...
CVE-2006-1249
Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows remote attackers to execute arbitrary code via a FlashPix FPX image that contains a field that specifies a large number of blocks...
CVE-2006-1249
CVE-2006-1249 describes an integer overflow in Apple QuickTime FPX image handling that can enable remote code execution. The vulnerability affects QuickTime Player versions 7.0.3/7.0.4 and related components (e.g., iTunes 6.x) due to a FPX field that specifies a large number of blocks, triggering...
[EEYEB-20051117A] Apple QuickTime STSD Atom Heap Overflow
EEYEB-20051117A Apple QuickTime STSD Atom Heap Overflow Release Date: January 10, 2006 Date Reported: November 17, 2005 Patch Development Time In Days: 54 Days Severity: High Code Execution Vendor: Apple Systems Affected: Quicktime on Windows 2000 Quicktime on Windows XP Quicktime on Mac OS X...
[EEYEB-20051117B] Apple iTunes (QuickTime.qts) Heap Overflow
EEYEB-20051031 Apple QuickTime Malformed GIF Heap Overflow Release Date: January 10, 2006 Date Reported: October 31, 2005 Severity: High Code Execution Patch Development Time In Days: 71 Days Severity: High Code Execution Vendor: Apple Systems Affected: Quicktime on Windows 2000 Quicktime on...
[EEYEB-20051117B] Apple iTunes (QuickTime.qts) Heap Overflow
EEYEB-20051117B Apple iTunes QuickTime.qts Heap Overflow Release Date: January 10, 2006 Date Reported: November 17, 2005 Patch Development Time In Days: 54 Days Severity: High Code Execution Vendor: Apple Systems Affected: Quicktime on Windows 2000 Quicktime on Windows XP Quicktime on Mac OS X...
[SA18149] Apple QuickTime / iTunes Memory Corruption Vulnerability
TITLE: Apple QuickTime / iTunes Memory Corruption Vulnerability SECUNIA ADVISORY ID: SA18149 VERIFY ADVISORY: http://secunia.com/advisories/18149/ CRITICAL: Moderately critical IMPACT: Unknown, DoS WHERE: From remote SOFTWARE: Apple QuickTime 7.x http://secunia.com/product/5090/ iTunes 6.x...