• info
• discussion
• exploit
• solution
• references

Apple iTunes '.pls' File Buffer Overflow Vulnerability

Solution:
Vendor updates are available. Please see the referenced advisory for details.


Apple iTunes 8.0

• Apple APPLE-SA-2009-09-22-1-iTunes64Setup.exe
  http://www.apple.com/itunes/download/


• Apple APPLE-SA-2009-09-22-1-iTunesSetup.exe
  http://www.apple.com/itunes/download/


• Apple iTunes9.0.1.dmg
  http://www.apple.com/itunes/download/

Apple iTunes 8.2

• Apple APPLE-SA-2009-09-22-1-iTunes64Setup.exe
  http://www.apple.com/itunes/download/


• Apple APPLE-SA-2009-09-22-1-iTunesSetup.exe
  http://www.apple.com/itunes/download/


• Apple iTunes9.0.1.dmg
  http://www.apple.com/itunes/download/

Apple iTunes 8.1

• Apple APPLE-SA-2009-09-22-1-iTunes64Setup.exe
  http://www.apple.com/itunes/download/


• Apple APPLE-SA-2009-09-22-1-iTunesSetup.exe
  http://www.apple.com/itunes/download/


• Apple iTunes9.0.1.dmg
  http://www.apple.com/itunes/download/

Apple iTunes 9.0

• Apple APPLE-SA-2009-09-22-1-iTunes64Setup.exe
  http://www.apple.com/itunes/download/


• Apple APPLE-SA-2009-09-22-1-iTunesSetup.exe
  http://www.apple.com/itunes/download/


• Apple iTunes9.0.1.dmg
  http://www.apple.com/itunes/download/