Apple ITunes Playlist Buffer Overflow Vulnerability
BID:12238
Info
Apple ITunes Playlist Buffer Overflow Vulnerability
| Bugtraq ID: | 12238 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2005-0043 |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 11 2005 12:00AM |
| Updated: | Jul 12 2009 09:27AM |
| Credit: | Discovery is credited to Sean de Regge. |
| Vulnerable: |
Apple iTunes 4.7 Apple iTunes 4.6 Apple iTunes 4.5 Apple iTunes 4.2 .72 |
| Not Vulnerable: |
Apple iTunes 4.7.1 |
Discussion
Apple ITunes Playlist Buffer Overflow Vulnerability
Apple iTunes is prone to a buffer overflow vulnerability. This issue is exposed when the application parses 'm3u' and 'pls' playlist files. As these files may originate from an external source, this issue is considered remotely exploitable.
If the vulnerability is successfully exploited, it will result in execution of arbitrary code in the context of the user running the application.
Apple iTunes is prone to a buffer overflow vulnerability. This issue is exposed when the application parses 'm3u' and 'pls' playlist files. As these files may originate from an external source, this issue is considered remotely exploitable.
If the vulnerability is successfully exploited, it will result in execution of arbitrary code in the context of the user running the application.
Exploit / POC
Apple ITunes Playlist Buffer Overflow Vulnerability
The following examples are available:
An example malicious .pls file with a long URL:
[playlist]
NumberOfEntries=1
File1=http://[A x 3045]1234
An example malicious .m3u file with a long URL:
http://[A x 3045]1234
The exploit 'fm-eyetewnz.c' has been released to the public by nemo <[email protected]>:
An additional exploit 'atmaca.c' has been released by atmaca <[email protected]>:
The following examples are available:
An example malicious .pls file with a long URL:
[playlist]
NumberOfEntries=1
File1=http://[A x 3045]1234
An example malicious .m3u file with a long URL:
http://[A x 3045]1234
The exploit 'fm-eyetewnz.c' has been released to the public by nemo <[email protected]>:
An additional exploit 'atmaca.c' has been released by atmaca <[email protected]>:
Solution / Fix
Apple ITunes Playlist Buffer Overflow Vulnerability
Solution:
Apple has released iTunes 4.7 to address this vulnerability. Mac OS X users may automatically apply this update through the Software Update pane in System Preferences.
Manual updates for Mac OS X and Windows are also available through the iTunes download page.
Apple iTunes 4.2 .72
Apple iTunes 4.5
Apple iTunes 4.6
Apple iTunes 4.7
Solution:
Apple has released iTunes 4.7 to address this vulnerability. Mac OS X users may automatically apply this update through the Software Update pane in System Preferences.
Manual updates for Mac OS X and Windows are also available through the iTunes download page.
Apple iTunes 4.2 .72
-
Apple iTunes 4.7.1
http://www.apple.com/itunes/download/
Apple iTunes 4.5
-
Apple iTunes 4.7.1
http://www.apple.com/itunes/download/
Apple iTunes 4.6
-
Apple iTunes 4.7.1
http://www.apple.com/itunes/download/
Apple iTunes 4.7
-
Apple iTunes 4.7.1
http://www.apple.com/itunes/download/
References
Apple ITunes Playlist Buffer Overflow Vulnerability
References:
References: