CVE

Id
38385  
CVE No.
CVE-2009-0950  
Status
Candidate  
Description
Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon.  
Phase
Assigned (20090318)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
418911 38385 CVE-2009-0950 BUGTRAQ:20090602 Re: TPTI-09-03: Apple iTunes Multiple Protocol Handler Buffer Overflow Vulnerabilities  View
418912 38385 CVE-2009-0950 URL:http://www.securityfocus.com/archive/1/archive/1/504043/100/0/threaded  View
418913 38385 CVE-2009-0950 MILW0RM:8861  View
418914 38385 CVE-2009-0950 URL:http://www.milw0rm.com/exploits/8861  View
418915 38385 CVE-2009-0950 MILW0RM:8934  View
418916 38385 CVE-2009-0950 URL:http://www.milw0rm.com/exploits/8934  View
418917 38385 CVE-2009-0950 MISC:http://redpig.dataspill.org/2009/05/drive-by-attack-for-itunes-811.html  View
418918 38385 CVE-2009-0950 MISC:http://static.dataspill.org/releases/itunes/itms_overflow.rb  View
418919 38385 CVE-2009-0950 CONFIRM:http://support.apple.com/kb/HT3592  View
418920 38385 CVE-2009-0950 APPLE:APPLE-SA-2009-06-01-2  View
418921 38385 CVE-2009-0950 URL:http://lists.apple.com/archives/security-announce/2009/Jun/msg00001.html  View
418922 38385 CVE-2009-0950 BID:35157  View
418923 38385 CVE-2009-0950 URL:http://www.securityfocus.com/bid/35157  View
418924 38385 CVE-2009-0950 OSVDB:54833  View
418925 38385 CVE-2009-0950 URL:http://osvdb.org/54833  View
418926 38385 CVE-2009-0950 OVAL:oval:org.mitre.oval:def:17099  View
418927 38385 CVE-2009-0950 URL:http://oval.mitre.org/repository/data/getDef?id=oval:org.mitre.oval:def:17099  View
418928 38385 CVE-2009-0950 SECTRACK:1022313  View
418929 38385 CVE-2009-0950 URL:http://www.securitytracker.com/id?1022313  View
418930 38385 CVE-2009-0950 SECUNIA:35314  View
418931 38385 CVE-2009-0950 URL:http://secunia.com/advisories/35314  View
418932 38385 CVE-2009-0950 VUPEN:ADV-2009-1470  View
418933 38385 CVE-2009-0950 URL:http://www.vupen.com/english/advisories/2009/1470  View
418934 38385 CVE-2009-0950 XF:itunes-itms-bo(50899)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
40718 JVNDB-2009-001724 Apple QuickTime における CRGN アトムタイプの処理に関するバッファオーバーフローの脆弱性 Apple QuickTime には、ムービーファイルの Clipping Region (CRGN) アトムタイプの処理に不備があるため、ヒープベースのバッファオーバーフローの脆弱性が存在します。 CVE-2009-0954 38385 9.3 http://jvndb.jvn.jp/ja/contents/2009/JVNDB-2009-001724.html  View