Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .m3u playlist.

The remote host has iTunes installed, a popular media player for Windows and Mac OS. 

Versions of iTunes earlier than 10.6.3 are reportedly affected by the following issues:

  - A memory corruption issue exists in WebKit that can allow malicious websites to crash the application and possibly execute arbitrary code. (CVE-2012-0672)

  - A heap-based buffer overflow exists related to the handling of 'm3u' playlist files. This error can cause the application to crash or possibly allow arbitrary code execution. (CVE-2012-0677)


The version of iTunes installed on the remote Mac OS X host is earlier than 10.6.3 and is, therefore, affected by stack and heap based buffer overflow vulnerabilities. The application does not properly handle 'm3u' playlist files. This error can cause the application to crash or possibly allow arbitrary code execution.

The version of Apple iTunes on the remote Windows host is prior to version 10.6.3. It is, therefore, affected by the following vulnerabilities :

  - A memory corruption vulnerability exists in the WebKit     component. By using a specially crafted website, an     attacker can exploit this to cause a denial of service     or execute arbitrary code. Note that this vulnerability     was addressed on Mac OS X systems by an update for     Safari and, therefore, may not necessarily affect the     remote host. (CVE-2012-0672)

  - Stack and heap based buffer overflow errors exist in     the handling of 'm3u' playlist files. An attacker can     exploit these to cause a denial of service or execute     arbitrary code. (CVE-2012-0677)

The version of Apple iTunes installed on the remote Windows host is older than 10.6.3 and is, therefore, affected by the following issues :

  - A memory corruption issue exists in WebKit that can     allow malicious websites to crash the application and     possibly to execute arbitrary code. (CVE-2012-0672)

  - Stack and heap based buffer overflow errors related to     the handling of 'm3u' playlist files. These errors can     cause the application to crash or possibly allow     arbitrary code execution. (CVE-2012-0677)

ID	Name	Product	Family	Type	Severity
6500	iTunes < 10.6.3 Multiple Vulnerabilities	Nessus Network Monitor	Web Clients		high
59499	iTunes < 10.6.3 m3u Multiple Buffer Overflow Vulnerabilities (Mac OS X)	Nessus	MacOS X Local Security Checks	Local	high
59498	Apple iTunes < 10.6.3 Multiple Vulnerabilities (uncredentialed check)	Nessus	Peer-To-Peer File Sharing	Remote	high
59497	Apple iTunes < 10.6.3 Multiple Vulnerabilities (credentialed check)	Nessus	Windows	Local	high

Detections

Analytics

CVE-2012-0677

high

Tenable Plugins

high

high

high

high