Apple iTunes 7.0.2 allows user-assisted remote malicious users to cause a denial of service (application crash) via a crafted XML list of radio stations, which results in memory corruption. NOTE: iTunes retrieves the XML document from a static URL, which requires an malicious user to perform DNS spoofing or man-in-the-middle attacks for exploitation.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
apple itunes 7.0.2 |
Vulmon