7.5
CVSSv2

CVE-2005-0043

Published: 02/05/2005 Updated: 11/07/2017
CVSS v2 Base Score: 7.5 | Impact Score: 6.4 | Exploitability Score: 10
VMScore: 760
Vector: AV:N/AC:L/Au:N/C:P/I:P/A:P

Vulnerability Summary

Buffer overflow in Apple iTunes 4.7 allows remote malicious users to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.

Vulnerable Product Search on Vulmon Subscribe to Product

apple itunes 4.7

Exploits

## # $Id: apple_itunes_playlistrb 9262 2010-05-09 17:45:00Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' ...
/* * PoC for iTunes on OS X 1037 * -( nemo@felinemenaceorg )- * * Generates a pls file, when loaded in iTunes it * binds a shell to port 4444 * Shellcode contains no \x00 or \x0a's * * sample output: * * -[nemo@gir:~]$ /fm-eyetewnz foopls * -( fm-eyetewnz )- * -( nemo@felinemenaceorg )- * Creating file: foopls * Bindshell o ...