Summary
This host has Apple iTunes installed, which is prone to stack based Buffer Overflow vulnerability.
Impact
Successful attacks will lead to buffer overflow or denial of service to legitimate users.
Impact Level: Application
Solution
Upgrade to Apple iTunes Version 8.2
http://www.apple.com/itunes/download
Insight
Error occurs when application fails to perform adequate boundary checks before copying user-supplied data to an insufficiently-sized buffer while processing a specially crafted 'itms:' URL.
Affected
Apple iTunes version prior to 8.2 on Windows.
References
Severity
Classification
-
CVE CVE-2009-0950 -
CVSS Base Score: 9.3
AV:N/AC:M/Au:N/C:C/I:C/A:C
Related Vulnerabilities
- Asterisk HTTP Manager Buffer Overflow Vulnerability
- Alpine tmail and dmail Buffer Overflow Vulnerabilities (Win)
- Adobe Acrobat and Reader SING 'uniqueName' Buffer Overflow Vulnerability (Win)
- Apache mod_proxy content-length buffer overflow
- CursorArts ZipWrangler 'ZIP Processing' Buffer Overflow Vulnerability