Oval Definition:oval:org.mitre.oval:def:17303
Revision Date:2015-06-22Version:6
Title:Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file
Description:Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file.
Family:windowsClass:vulnerability
Status:ACCEPTEDReference(s):CVE-2007-3752
Platform(s):Microsoft Windows 2000
Microsoft Windows 7
Microsoft Windows 8
Microsoft Windows Server 2003
Microsoft Windows Server 2008
Microsoft Windows Server 2008 R2
Microsoft Windows Server 2012
Microsoft Windows Vista
Microsoft Windows XP
Product(s):Apple iTunes
Definition Synopsis
  • Apple iTunes is installed
  • AND iTunes.exe version is less than 7.4.0.28
  • BACK