CVE-2006-1467 — Apple Itunes vulnerability

CWE-1892 documents2 sources
Severity
5.1MEDIUMNVD
EPSS
29.7%
top 3.36%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
1
Apple Itunes
Timeline
PublishedJun 29
Latest updateMay 1

Description

Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remote user-assisted attackers to execute arbitrary code via an AAC (M4P, M4A, or M4B) file with a sample table size (STSZ) atom with a "malformed" sample_size_table value.

CVSS vector

AV:N/AC:H/C:P/I:P/A:PExploitability: 4.9 | Impact: 6.4

Affected Packages1 packages

▶NVDapple/itunes6.0.4

Patches

Patch: docs.info.apple.com ↗Patch: secunia.com ↗Patch: www.kb.cert.org ↗

🔴Vulnerability Details

1
GHSA
GHSA-fw99-pr6r-pcfm: Integer overflow in the AAC file parsing code in Apple iTunes before 6↗2022-05-01
▶