CVE

Id
27109  
CVE No.
CVE-2007-3752  
Status
Candidate  
Description
Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file.  
Phase
Assigned (20070712)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
277378 27109 CVE-2007-3752 BUGTRAQ:20070906 iTunes 7.3.x - Heap overflow in album cover parsing  View
277379 27109 CVE-2007-3752 URL:http://www.securityfocus.com/archive/1/archive/1/478750/100/0/threaded  View
277380 27109 CVE-2007-3752 MISC:https://www.isecpartners.com/advisories/2007-005-itunes.txt  View
277381 27109 CVE-2007-3752 CONFIRM:http://docs.info.apple.com/article.html?artnum=306404  View
277382 27109 CVE-2007-3752 APPLE:APPLE-SA-2007-09-06  View
277383 27109 CVE-2007-3752 URL:http://lists.apple.com/archives/security-announce/2007/Sep/msg00000.html  View
277384 27109 CVE-2007-3752 BID:25567  View
277385 27109 CVE-2007-3752 URL:http://www.securityfocus.com/bid/25567  View
277386 27109 CVE-2007-3752 OVAL:oval:org.mitre.oval:def:17303  View
277387 27109 CVE-2007-3752 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:17303  View
277388 27109 CVE-2007-3752 VUPEN:ADV-2007-3073  View
277389 27109 CVE-2007-3752 URL:http://www.vupen.com/english/advisories/2007/3073  View
277390 27109 CVE-2007-3752 OSVDB:38528  View
277391 27109 CVE-2007-3752 URL:http://osvdb.org/38528  View
277392 27109 CVE-2007-3752 SECTRACK:1018658  View
277393 27109 CVE-2007-3752 URL:http://www.securitytracker.com/id?1018658  View
277394 27109 CVE-2007-3752 SECUNIA:26725  View
277395 27109 CVE-2007-3752 URL:http://secunia.com/advisories/26725  View
277396 27109 CVE-2007-3752 XF:itunes-music-file-bo(36485)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
52056 JVNDB-2007-000719 Apple iPhone の Mail における中間者攻撃を受ける脆弱性 Apple iPhone の Mail には、SSL 接続を使用した場合、メールサーバが変更された際や信頼されていないメールサーバへ接続された際、ユーザに警告しない問題が存在します。 CVE-2007-3754 27109 4.3 http://jvndb.jvn.jp/ja/contents/2007/JVNDB-2007-000719.html  View