Apple iTunes DAAP Messages Handling Denial of Service Vulnerability
Apple iTunes DAAP Messages Handling Denial of Service Vulnerability
2009.Mar.13
Fortinet's FortiGuard Global Security Research Team Discovers Vulnerability in
Apple iTunes
Summary:
========
A DoS vulnerability in Apple iTunes through a maliciously crafted DAAP
message.
Impact:
=======
Denial of service.
Risk:
=====
Medium
Affected Software:
==================
Apple iTunes 8 for Windows, other versions may be affected
This issue does not affect Mac OS X systems
References:
===========
FortiGuard Advisory:
http://www.fortiguardcenter.com/advisory/FGA-2009-11.html
Apple Security Bulletin: http://support.apple.com/kb/HT3487
Apple Security Updates: http://support.apple.com/kb/ht1222
CVE ID: CVE-2009-0016
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0016
Acknowledgments:
================
Xiaopeng Zhang, Zhenhua Liu, and Junfeng Jia of Fortinet's FortiGuard
Global Security Research Team
*** This email and any attachments thereto may contain private, confidential,
and privileged material for the sole use of the intended recipient. Any
review, copying, or distribution of this email (or any attachments thereto) by
others is strictly prohibited. If you are not the intended recipient, please
contact the sender immediately and permanently delete the original and any
copies of this email and any attachments thereto. ***