Published: 02/06/2009 Updated: 10/10/2018

CVSS v2 Base Score: 9.3 | Impact Score: 10 | Exploitability Score: 8.6

VMScore: 950

Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C

Stack-based buffer overflow in Apple iTunes prior to 8.2 allows remote malicious users to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon.

Vulnerable Product	Search on Vulmon	Subscribe to Product
apple itunes 1.0
apple itunes 1.1.1
apple itunes 1.1.2
apple itunes 2.0.1
apple itunes 2.0.2
apple itunes 2.0.3
apple itunes 2.0.4
apple itunes 3.0
apple itunes 3.0.1
apple itunes 4.0.1
apple itunes 4.1
apple itunes 4.2
apple itunes 4.5
apple itunes 4.5.0
apple itunes 4.6
apple itunes 4.7
apple itunes 4.7.1
apple itunes 4.8.0
apple itunes 4.8
apple itunes 4.9
apple itunes 5.0.0
apple itunes 6.0.0
apple itunes 6.0.4.2
apple itunes 6.0.3
apple itunes 6.0.2
apple itunes 6.0.5
apple itunes 7.0.0
apple itunes 7.0.2
apple itunes 7.0.1
apple itunes 7.3.1
apple itunes 7.1.1
apple itunes 7.4.1
apple itunes 2.0
apple itunes 4.0.0
apple itunes 4.1.0
apple itunes 4.2.72
apple itunes 4.6.0
apple itunes 4.7.1.30
apple itunes 5.0
apple itunes 6.0
apple itunes 6.0.1
apple itunes 6.0.4
apple itunes 7.1.0
apple itunes 7.3.0
apple itunes 7.3.2
apple itunes 7.4.0
apple itunes 7.4.3
apple itunes 7.4.2
apple itunes 7.6.0
apple itunes 7.5
apple itunes 7.6.2
apple itunes 7.6.1
apple itunes 7.7.0
apple itunes 7.7.1
apple itunes 8.0
apple itunes 8.0.1
apple itunes 8.1
apple itunes
apple itunes 1.1
apple itunes 4.0
apple itunes 4.2.0
apple itunes 4.7.0
apple itunes 4.9.0
apple itunes 5.0.1
apple itunes 7.2.0
apple itunes 7.6
apple itunes 7.7
apple itunes 8.0.0
apple itunes 8.0.2
apple itunes 7.4
apple itunes 7.5.0
apple itunes 4.7.2

Apple iTunes version 81110 itms/itcp buffer overflow exploit for Microsoft Windows ...

Apple iTunes 81x (daap) remote buffer overflow exploit that binds a shell to port 4444 ...

/* iTunes-CVE09-s36c * * Apple iTunes 81x (daap) Buffer overflow remote exploit (CVE-2009-0950) * * Coded By : * :: [ Simo36 ] :: * * Contact : Overflows@hotmailcom * His0k4hlm@gmailcom * * Home : wwwsec-r1zcom * * Tested on : Win XP SP/SP3 Frensh , Win2k pro SP4 english * * Thanks To : ...

## # $Id: $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/projects/Framework/ ## require 'msf/core' class Metasploit3 < Msf::Exploit::Remote i ...

#!/usr/bin/python # Apple iTunes 81110 itms/itcp BOF Windows Exploit # wwwoffensive-securitycom/blog/vulndev/itunes-exploitation-case-study/ # Matteo Memelli | ryujin __A-T__ offensive-securitycom # Spaghetti & Pwnsauce - 06/10/2009 # CVE-2009-0950 dvlabstippingpointcom/advisory/TPTI-09-03 # # Vulnerability can't be exploited si ...

## # $Id: itms_overflowrb 10998 2010-11-11 22:43:22Z jduck $ ## ## # This file is part of the Metasploit Framework and may be subject to # redistribution and commercial restrictions Please see the Metasploit # Framework web site for more information on licensing and terms of use # metasploitcom/framework/ ## require 'msf/core' class ...

CWE-119 http://www.securityfocus.com/bid/35157 http://www.vupen.com/english/advisories/2009/1470 http://support.apple.com/kb/HT3592 http://secunia.com/advisories/35314 http://lists.apple.com/archives/security-announce/2009/Jun/msg00001.html http://redpig.dataspill.org/2009/05/drive-by-attack-for-itunes-811.html http://www.securitytracker.com/id?1022313 http://osvdb.org/54833 http://static.dataspill.org/releases/itunes/itms_overflow.rb https://exchange.xforce.ibmcloud.com/vulnerabilities/50899 https://www.exploit-db.com/exploits/8934 https://www.exploit-db.com/exploits/8861 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17099 http://www.securityfocus.com/archive/1/504043/100/0/threaded https://nvd.nist.gov https://packetstormsecurity.com/files/78301/Apple-iTunes-8.1.1.10-Buffer-Overflow-Exploit.html https://www.exploit-db.com/exploits/11138/

CVE-2009-0950

Vulnerability Summary

Exploits

References

Vulmon Search

About

Products

Connect