Lucene search
K

7 matches found

securityvulns
securityvulns
added 2007/09/08 12:0 a.m.25 views

iTunes 7.3.x - Heap overflow in album cover parsing

iSEC Partners Security Advisory - 2007-005-itunes https://www.isecpartners.com -------------------------------------------- iTunes 7.3.x - Heap overflow in album cover parsing Vendor: Apple, Inc. Vendor URL: http://www.apple.com Versions affected: Confirmed in iTunes 7.3.2 Systems Affected:...

2.5AI score
Exploits0
Tenable Nessus
Tenable Nessus
added 2007/09/07 12:0 a.m.19 views

iTunes < 7.4 Malformed Music File Heap Overflow (Mac OS X)

The remote host is running iTunes, a popular jukebox program. The remote version of iTunes is vulnerable to a heap overflow when it parses a specially crafted MP4/AAC file. By tricking a user into opening such a file, a remote attacker may be able to leverage this issue to execute arbitrary code ...

9.3CVSS6.2AI score0.16555EPSS
Exploits0References2
Tenable Nessus
Tenable Nessus
added 2007/09/07 12:0 a.m.23 views

Apple iTunes < 7.4 Malformed Music File Heap Overflow (credentialed check)

The remote host is running Apple iTunes, a popular media player. The remote version of iTunes is vulnerable to a heap overflow when it parses a specially crafted MP4/AAC file. By tricking a user into opening such a file, a remote attacker may be able to leverage this issue to execute arbitrary co...

9.3CVSS6.2AI score0.16555EPSS
Exploits0References2
NVD
NVD
added 2007/09/06 9:17 p.m.21 views

CVE-2007-3752

Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service application crash or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file...

9.3CVSS7.8AI score0.16555EPSS
Exploits0References11
Prion
Prion
added 2007/09/06 9:17 p.m.18 views

Heap overflow

Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service application crash or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file...

9.3CVSS8.1AI score0.16555EPSS
Exploits0References11Affected Software1
Cvelist
Cvelist
added 2007/09/06 9:0 p.m.20 views

CVE-2007-3752

Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service application crash or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file...

7.7AI score0.16555EPSS
Exploits0References11
Tenable Nessus
Tenable Nessus
added 2007/09/06 12:0 a.m.14 views

iTunes < 7.4.0 MP4/AAC File covr atom Overflow

Binary data 4204.prm...

9.3CVSS7.3AI score0.16555EPSS
Exploits0References2
Rows per page
Query Builder