CVE-2005-1248

Description

Buffer overflow in Apple iTunes before 4.8 allows remote attackers to execute arbitrary code via a crafted MPEG4 file.

Risk Information

Base Score
7.8
MODERATE
Vector
AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H
EPSS Score
Exploitation Probability
6.283

Associated Vulnerability

VulnerabilityOS Platform
Multiple vulnerabilities affected in Apple iTunes (X64) 4.7.1Windows
Multiple vulnerabilities affected in Apple iTunes 4.7.1Windows
Multiple Vulnerabilities are affected in Apple iTunes For Mac 4.7Mac
Vulnerabilities CVE-2005-1248,CVE-2009-0950,CVE-2009-2817,CVE-2010-1777 are affected in Apple iTunes For Mac 4.2.72Mac
Multiple Vulnerabilities are affected in Apple iTunes For Mac 4.6Mac
Multiple Vulnerabilities are affected in Apple iTunes For Mac 4.7.1Mac
Vulnerabilities CVE-2005-1248,CVE-2008-3634,CVE-2009-0950,CVE-2010-1777 are affected in Apple iTunes For Mac 4.2.72Mac

Patch Details

Click to see the patches provided by ManageEngine for this CVE
Patch IDPatch Description
PATCH-342817Apple iTunes (X64) (12.13.4.4)
PATCH-342816Apple iTunes (12.13.4.4)

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234