CVE-2009-0950
HIGH 9.3EPSS 28.8%
Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon.
- CVSS v2.0 NVD
- 9.3 HIGH
AV:N/AC:M/Au:N/C:C/I:C/A:C - EPSS
- 28.82% chance of exploitation in the next 30 days, 98th percentile
- Published
- 2009-06-02
- Updated
- 2024-08-07
Metasploit modules (1)
ExploitDB entries (4)
- https://www.exploit-db.com/exploits/16296
- https://www.exploit-db.com/exploits/11138
- https://www.exploit-db.com/exploits/8934
- https://www.exploit-db.com/exploits/8861
Security advisories
- http://lists.apple.com/archives/security-announce/2009/Jun/msg00001.html
- http://secunia.com/advisories/35314
- http://support.apple.com/kb/HT3592
- http://www.vupen.com/english/advisories/2009/1470
- http://www.securityfocus.com/bid/35157