Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file.

The version of Apple iTunes on the remote host is prior to version 7.4. It is, therefore, affected by a heap overflow vulnerability when it parses specially crafted MP4/AAC files. By convincing a user into opening such a file, a remote attacker can execute arbitrary code with the same level of privileges as the user.

The remote host is running iTunes, a popular jukebox program. 

The remote version of iTunes is vulnerable to a heap overflow when it parses a specially crafted MP4/AAC file.  By tricking a user into opening such a file, a remote attacker may be able to leverage this issue to execute arbitrary code on the affected host, subject to the privileges of the user running the application.

The remote host is running Apple iTunes, a popular media player.

The remote version of iTunes is vulnerable to a heap overflow when it parses a specially crafted MP4/AAC file.  By tricking a user into opening such a file, a remote attacker may be able to leverage this issue to execute arbitrary code on the affected host, subject to the privileges of the user running the application.

The remote host is running iTunes - an application for managing and listening to music media files.
This version of iTunes is vulnerable to a buffer overflow due to the way that it processes malformed MP4/AAC files.  An attacker exploiting this flaw would need to be able to entice an iTunes user into opening a malformed file.  Successful exploitation would result in the attacker executing arbitrary code on the remote system.

ID	Name	Product	Family	Type	Severity
26000	Apple iTunes < 7.4 Malformed Music File Heap Overflow (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	Remote	high
25999	iTunes < 7.4 Malformed Music File Heap Overflow (Mac OS X)	Nessus	MacOS X Local Security Checks	Local	high
25998	Apple iTunes < 7.4 Malformed Music File Heap Overflow (credentialed check)	Nessus	Windows	Local	high
4204	iTunes < 7.4.0 MP4/AAC File covr atom Overflow	Nessus Network Monitor	Web Clients		medium

Detections

Analytics

CVE-2007-3752

high

Tenable Plugins

high

high

high

medium