CVE-2005-0043 Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.
HighCVSS 7.5
EPSS 69.0%
Framework module
Public exploit
- Published
- Updated
- Exploit status
- Public exploit available
Description
Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple itunes | = 4.7 | No fix listed |
References
- APPLE-SA-2005-01-11 patch vendor-advisory
- 13804 third-party-advisory
- 1012839 vdb-entry
- 20050113 Apple iTunes Playlist Parsing Buffer Overflow Vulnerability exploit patch third-party-advisory
- VU#377368 patch third-party-advisory us-government-resource
- 12833 vdb-entry
- 12238 vdb-entry
- itunes-m3u-pls-bo(18851) vdb-entry