<<< Date Index >>>     <<< Thread Index >>>

Apple iTunes DAAP Messages Handling Denial of Service Vulnerability 



Apple iTunes DAAP Messages Handling Denial of Service Vulnerability   
2009.Mar.13  

Fortinet's FortiGuard Global Security Research Team Discovers Vulnerability in 
Apple iTunes

Summary:  
======== 
    A DoS vulnerability in Apple iTunes through a maliciously crafted DAAP 
message. 
    
Impact: 
=======
 
    Denial of service. 
 
Risk:  
=====

    Medium  
 
Affected Software:  
==================
 
    Apple iTunes 8 for Windows, other versions may be affected  
    This issue does not affect Mac OS X systems 

References:  
===========
 
        FortiGuard Advisory:     
http://www.fortiguardcenter.com/advisory/FGA-2009-11.html
    Apple Security Bulletin: http://support.apple.com/kb/HT3487  
    Apple Security Updates:  http://support.apple.com/kb/ht1222  
    CVE ID: CVE-2009-0016    
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0016
 
Acknowledgments:   
================
 
    Xiaopeng Zhang, Zhenhua Liu, and Junfeng Jia of Fortinet's FortiGuard 
Global Security Research Team 


*** This email and any attachments thereto may contain private, confidential, 
and privileged material for the sole use of the intended recipient.  Any 
review, copying, or distribution of this email (or any attachments thereto) by 
others is strictly prohibited.  If you are not the intended recipient, please 
contact the sender immediately and permanently delete the original and any 
copies of this email and any attachments thereto. ***