Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remote user-assisted attackers to execute arbitrary code via an AAC (M4P, M4A, or M4B) file with a sample table size (STSZ) atom with a "malformed" sample_size_table value.

The version of Apple iTunes running on the remote host is affected by an integer overflow vulnerability when it parses specially crafted AAC files. By convincing a user to open such a file, a remote attacker can execute arbitrary code with the same level of privileges as the user.

The remote host is running Apple iTunes, a popular media player.

The remote version of iTunes is vulnerable to an integer overflow when it parses a specially crafted AAC file. By tricking a user into opening such a file, a remote attacker may be able to leverage this issue to execute arbitrary code on the affected host, subject to the privileges of the user running the application.

Description :

The remote host is running iTunes, a popular jukebox program.
The remote version of this software is vulnerable to an integer overflow when it parses specially crafted AAC files that may lead to the execution of arbitrary code.

An attacker may exploit this flaw by sending a malformed AAC file to a user on the remote host and wait for them to play it with iTunes.

Risk factor :

Medium

The remote host is running iTunes, a popular jukebox program. 

The remote version of this software is vulnerable to an integer overflow when it parses specially crafted AAC files which may lead to the execution of arbitrary code. 

An attacker may exploit this flaw by sending a malformed AAC file to a user on the remote host and wait for him to play it with iTunes.

ID	Name	Product	Family	Type	Severity
21783	Apple iTunes AAC File Parsing Integer Overflow (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	Remote	medium
21782	Apple iTunes AAC File Parsing Integer Overflow (credentialed check)	Nessus	Windows	Local	medium
3671	iTunes < 6.0.5 AAC File Parsing Overflow	Nessus Network Monitor	Web Clients		medium
21781	iTunes < 6.0.5 AAC File Integer Overflow (Mac OS X)	Nessus	MacOS X Local Security Checks	Local	medium

Detections

Analytics

CVE-2006-1467

critical

Tenable Plugins

medium

medium

medium

medium