Apple.iTunes.PLS.Processing.Buffer.Overflow

Description

This indicates an attack attempt against a buffer-overflow vulnerability in Apple iTunes.
The vulnerability is caused by an error when the vulnerable software handles a malicious .PLS file. It allows a remote attacker to execute arbitrary code via sending a crafted .pls file.

Affected Products

Apple iTunes before 9.0.1

Impact

System Compromise: Remote attackers can gain control of vulnerable systems

Recommended Actions

Upgrade to the latest version Apple iTunes 9.0.1

References

http://www.exploit-db.com/exploits/11491 http://secunia.com/advisories/36744/ http://support.apple.com/kb/HT3884