OSEC

Neohapsis is currently accepting applications for employment. For more information, please visit our website www.neohapsis.com or email hr@neohapsis.com
[Full-disclosure] Apple iTunes DAAP Messages Handling Denial of Service Vulnerability

secresearchfortinet.com
Date: Thu Mar 12 2009 - 20:59:57 CDT


Apple iTunes DAAP Messages Handling Denial of Service Vulnerability  
2009.Mar.13 

Fortinet's FortiGuard Global Security Research Team Discovers Vulnerability in Apple iTunes

Summary: 
========
    A DoS vulnerability in Apple iTunes through a maliciously crafted DAAP message.
    
Impact:
=======
 
    Denial of service.

Risk: 
=====

    Medium 

Affected Software: 
==================
 
    Apple iTunes 8 for Windows, other versions may be affected 
    This issue does not affect Mac OS X systems

References: 
===========

        FortiGuard Advisory: http://www.fortiguardcenter.com/advisory/FGA-2009-11.html
    Apple Security Bulletin: http://support.apple.com/kb/HT3487 
    Apple Security Updates: http://support.apple.com/kb/ht1222 
    CVE ID: CVE-2009-0016  http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0016

Acknowledgments:  
================
 
    Xiaopeng Zhang, Zhenhua Liu, and Junfeng Jia of Fortinet's FortiGuard Global Security Research Team

*** This email and any attachments thereto may contain private, confidential, and privileged material for the sole use of the intended recipient. Any review, copying, or distribution of this email (or any attachments thereto) by others is strictly prohibited. If you are not the intended recipient, please contact the sender immediately and permanently delete the original and any copies of this email and any attachments thereto. ***

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/