Skip to main content

Apple iTunes "itms:" URI Handling Remote Buffer Overflow Vulnerability

Last Update Date: 28 Jan 2011 Release Date: 3 Jun 2009 4846 Views

RISK: Medium Risk

A vulnerability has been identified in Apple iTunes, which could be exploited by remote attackers to cause a denial of service or compromise a vulnerable system. This issue is caused by a stack overflow error when processing a specially crafted "itms:" URL, which could be exploited by remote attackers to crash an affected application or execute arbitrary code by tricking a user into visiting a malicious web page.


Impact

  • Denial of Service
  • Remote Code Execution

System / Technologies affected

  • Apple iTunes versions prior to 8.2

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.


Vulnerability Identifier


Source


Related Link