Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon.

The remote version of iTunes is older than 8.2. Such versions are affected by a stack-based buffer overflow that can be triggered when parsing 'itms:' URLs.  If an attacker can trick a user on the affected host into clicking on a malicious link, he can leverage this issue to crash the affected application or to execute arbitrary code on the affected system subject to the user's privileges.

The version of Apple iTunes on the remote host is prior to version 8.2. It is, therefore, affected by a stack-based buffer overflow that can be triggered when parsing 'itms:' URLs. By convincing a user to click on a specially crafted link, a remote attacker can cause a denial of service or execute arbitrary code with the user's level of privileges.

The remote version of Apple iTunes is older than 8.2. Such versions are affected by a stack-based buffer overflow that can be triggered when parsing 'itms:' URLs. If an attacker can trick a user on the affected host into clicking on a malicious link, he can leverage this issue to crash the affected application or to execute arbitrary code on the affected system subject to the user's privileges.

According to its banner, the version of iTunes installed on the remote host is older than 8.2.  Such versions may be affected by a remote buffer overflow when parsing 'items: ' URLs. An attacker could exploit this flaw to execute arbitrary code on the remote host subject to the privileges of the user running the application. 

ID	Name	Product	Family	Severity
38987	iTunes < 8.2 itms: URL Stack Overflow (Mac OS X)	Nessus	MacOS X Local Security Checks	high
38986	Apple iTunes < 8.2 itms: URI Handling Overflow (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	high
38985	Apple iTunes < 8.2 itms: URI Handling Overflow (credentialed check)	Nessus	Windows	high
5041	iTunes < 8.2 Remote Overflow	Nessus Network Monitor	Web Clients	medium

Detections

Analytics

CVE-2009-0950

critical

Tenable Plugins

high

high

high

medium