CVE-2007-1008

Apple iTunes 7.0.2 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted XML list of radio stations, which results in memory corruption. NOTE: iTunes retrieves the XML document from a static URL, which requires an attacker to perform DNS spoofing or man-in-the-middle attacks for exploitation.

Link	Resource
http://www.securityfocus.com/bid/22615	Exploit
http://securityreason.com/securityalert/2278
http://osvdb.org/33742
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A16978
http://www.securityfocus.com/archive/1/460544/100/0/threaded

Configuration 1

cpe:2.3:a:apple:itunes:7.0.2:*:*:*:*:*:*:*

---

Published : 2007-02-20 01:28

Updated : 2018-10-16 04:36

---

NVD link : CVE-2007-1008

Mitre link : CVE-2007-1008

No products.

NVD-CWE-Other