Apple iTunes 'itpc:' URI Remote Buffer Overflow Vulnerability
BID:41789
Info
Apple iTunes 'itpc:' URI Remote Buffer Overflow Vulnerability
| Bugtraq ID: | 41789 |
| Class: | Design Error |
| CVE: |
CVE-2010-1777 |
| Remote: | Yes |
| Local: | No |
| Published: | Jul 19 2010 12:00AM |
| Updated: | Jul 19 2010 12:00AM |
| Credit: | Clint Ruoho of Laconic Security |
| Vulnerable: |
Apple iTunes 9.0.2 Apple iTunes 9.0.1 .8 Apple iTunes 9.0.1 Apple iTunes 9.0 Apple iTunes 9.2 Apple iTunes 9.1 Apple iTunes 8.2 Apple iTunes 8.1 Apple iTunes 8.0.2.20 Apple iTunes 8.0 |
| Not Vulnerable: |
Apple iTunes 9.2.1 |
Discussion
Apple iTunes 'itpc:' URI Remote Buffer Overflow Vulnerability
Apple iTunes is prone to a remote buffer-overflow vulnerability.
An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
Successful exploits can allow the attacker to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.
Apple iTunes is prone to a remote buffer-overflow vulnerability.
An attacker can exploit this issue by enticing an unsuspecting user to follow a malicious URI.
Successful exploits can allow the attacker to execute arbitrary code in the context of the application. Failed exploit attempts will result in a denial-of-service condition.
Exploit / POC
Apple iTunes 'itpc:' URI Remote Buffer Overflow Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Apple iTunes 'itpc:' URI Remote Buffer Overflow Vulnerability
Solution:
Vendor fixes are available. Please see the referenced advisory for details.
Apple iTunes 9.2
Apple iTunes 9.1
Solution:
Vendor fixes are available. Please see the referenced advisory for details.
Apple iTunes 9.2
-
Apple APPLE-SA-2010-07-19-1 iTunes64Setup.exe
For 64-bit Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/ -
Apple APPLE-SA-2010-07-19-1 iTunesSetup.exe
For Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/ -
Apple iTunes9.2.1.dmg
For Mac OS X
http://www.apple.com/itunes/download/
Apple iTunes 9.1
-
Apple APPLE-SA-2010-07-19-1 iTunes64Setup.exe
For 64-bit Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/ -
Apple APPLE-SA-2010-07-19-1 iTunesSetup.exe
For Windows XP / Vista / Windows 7
http://www.apple.com/itunes/download/ -
Apple iTunes9.2.1.dmg
For Mac OS X
http://www.apple.com/itunes/download/