HTTP: Illegal iTunes Playlist URL

This signature detects attempts to exploit a known vulnerability in iTunes parsing handler. iTunes 4.7 is vulnerable. Attackers can submit iTunes play lists that refer to illegal URLs, which can create a denial-of-service condition or allow them to execute arbitrary code.

Extended Description

Apple iTunes is prone to a buffer overflow vulnerability. This issue is exposed when the application parses 'm3u' and 'pls' playlist files. As these files may originate from an external source, this issue is considered remotely exploitable. If the vulnerability is successfully exploited, it will result in execution of arbitrary code in the context of the user running the application.

Affected Products

Apple itunes

References

BugTraq: 12238

CVE: CVE-2005-0043

URL: http://docs.info.apple.com/article.html?artnum=61798 http://www.sans.org/newsletters/risk/display.php?v=4&i=2#widely3

Short Name

HTTP:STC:ITUNES-PL

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Illegal iTunes Playlist URL

Extended Description

Affected Products

References

Found a potential security threat?