5758 matches found
CVE-2005-4092
Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 3 and earlier allow remote attackers to cause a denial of service crash and execute arbitrary code via a .mov file with 1 a Movie Resource atom with a large size value, or 2 an stsd atom with a...
CVE-2005-4092
Summary of CVE-2005-4092 and related advisories: This issue is a heap-based overflow in Apple QuickTime/ iTunes involving QuickTime.qts, exploitable via crafted QuickTime movie files. The vulnerabilities concern the handling of the Movie Resource atom with a large size and the STSD (Sample Descri...
CVE-2005-4092
Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 3 and earlier allow remote attackers to cause a denial of service crash and execute arbitrary code via a .mov file with 1 a Movie Resource atom with a large size value, or 2 an stsd atom with a...
CVE-2005-2938
CVE-2005-2938 affects Apple iTunes for Windows (iTunesHelper.exe) prior to iTunes 6. The vulnerability is an unquoted Windows search path in iTunesHelper.exe, which could allow a local user to gain privileges by placing a malicious C:\program.exe. Affected versions include iTunes 4.7.1.30 and iTu...
CVE-2005-2938
Unquoted Windows search path vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows might allow local users to gain privileges via a malicious C:\program.exe file...
CVE-2005-2938
Unquoted Windows search path vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows might allow local users to gain privileges via a malicious C:\program.exe file...
Apple iTunes code execution
CreateProcess is used insecurely on external application execution...
Apple iTunes For Windows iTunesHelper.exe Path Subversion Local Privilege Escalation (uncredentialed check)
According to its banner, the version of Apple iTunes for Windows on the remote host launches a helper application by searching for it through various system paths. By placing a malicious program in a system path, an attacker with local access can exploit this behavior to execute code before the...
iTunes For Windows < 6.0 Local Code Execution
Binary data 3296.prm...
Apple iTunes For Windows iTunesHelper.exe Path Subversion Local Privilege Escalation (credentialed check)
The version of Apple iTunes for Windows on the remote host launches a helper application by searching for it through various system paths. An attacker with local access can leverage this issue to place a malicious program in a system path and have it called before the helper application. C Tenabl...
APPLE-SA-2005-11-15 iTunes 6 for Windows
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 APPLE-SA-2005-11-15 iTunes 6 for Windows CVE-ID: CVE-2005-2938 Available for: Microsoft Windows XP and Microsoft Windows 2000 Impact: iTunes 5 for Windows may launch the wrong helper program Description: Due to the way iTunes 5 for Windows launches it...
Apple iTunes Music Sharing Enabled
Apple iTunes, a popular media player, is running on the remote host. Additionally, it is configured to stream music between hosts. This functionality may not be in compliance with your corporate security policy regarding file sharing or network usage. C Tenable Network Security, Inc...
Apple iTunes player Shared Music service DoS
Different playlist manipulation vulnerabilities...
Airscanner Mobile Security Advisory #05101001: iTunes Shared Music Denial of Service/Spoofing/Flooding/Abuse
Airscanner Mobile Security Advisory 05101001: iTunes 6.0 Shared Music Denial of Service/Spoofing/Flooding/Abuse Demo: The following is a link to a Flash demo in which we demonstrate the vulnerability. link to flash demo http://www.airscanner.com/security/itwns2.html URL:...
CVE-2005-1248
Buffer overflow in Apple iTunes before 4.8 allows remote attackers to execute arbitrary code via a crafted MPEG4 file...
CVE-2005-1248
CVE-2005-1248 describes a buffer overflow in Apple iTunes prior to 4.8 that can be triggered by a crafted MPEG‑4 file, allowing a remote attacker to execute arbitrary code. The description and related references consistently point to a vulnerability in the MPEG‑4 parsing path of iTunes, with impa...
CVE-2005-1248
Buffer overflow in Apple iTunes before 4.8 allows remote attackers to execute arbitrary code via a crafted MPEG4 file...
Apple iTunes < 4.8 MPEG-4 File Handling Overflow
Binary data 2889.prm...
iTunes < 4.8.0 MPEG-4 Parsing Overflow (Mac OS X)
The remote host is running a version of iTunes which is older than version 4.8.0. Such versions reportedly fail to perform certain validation checks on MPEG4 files, and hence it could be possible to trigger a buffer overflow condition. Successful exploitation of this issue could lead to a denial ...