HTTP: Apple iTunes Handler Stack Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Apple iTunes. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the user.

Extended Description

Apple iTunes is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks before copying user-supplied data to an insufficiently sized buffer. Attackers can leverage this issue to execute arbitrary code with the privileges of the user running the affected application. Failed attacks will likely cause denial-of-service conditions.

Affected Products

Apple itunes

References

BugTraq: 35157

CVE: CVE-2009-0950

URL: http://support.apple.com/kb/ht3592 http://dvlabs.tippingpoint.com/advisory/tpti-09-03

Short Name

HTTP:STC:ITUNES-HANDLER-OF

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Apple iTunes Handler Stack Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?