Apple iTunes '.m3u' Playlist File Heap Based Buffer Overflow Vulnerability

Bugtraq ID:	53933
Class:	Boundary Condition Error
CVE:	CVE-2012-0677
Remote:	Yes
Local:	No
Published:	Jun 11 2012 12:00AM
Updated:	Jun 17 2012 12:01AM
Credit:	Gjoko Krstic of Zero Science Lab
Vulnerable:	Apple iTunes 10.5.1 Apple iTunes 10.6 Apple iTunes 10.5 Apple iTunes 10.2.2 Apple iTunes 10.2 Apple iTunes 10.1 Apple iTunes 10
Not Vulnerable:

Apple iTunes '.m3u' Playlist File Heap Based Buffer Overflow Vulnerability

Apple iTunes is prone to a heap-based buffer-overflow vulnerability because the application fails to perform adequate boundary checks on user-supplied input.

Attackers may leverage this issue to execute arbitrary code in the context of the application. Failed attacks will cause denial-of-service conditions.

Apple iTunes '.m3u' Playlist File Heap Based Buffer Overflow Vulnerability

An attacker can exploit this issue by enticing an unsuspecting victim to open a playlist file using the affected application.

The following example is available:

• /data/vulnerabilities/exploits/53933.pl

Apple iTunes '.m3u' Playlist File Heap Based Buffer Overflow Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.

Apple iTunes '.m3u' Playlist File Heap Based Buffer Overflow Vulnerability

References: