CVE-2005-0043
Apple iTunes 4.7 - Remote Code Execution via Long URL in Playlist Files
Title source: llmExploitation Summary
EIP tracks 3 public exploits for CVE-2005-0043.
PoCs published by Metasploit, nemo, including Metasploit module exploits/windows/browser/apple_itunes_playlist.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in Apple iTunes 4.7 via a malicious PLS file. It delivers a payload through an HTTP server, triggering arbitrary code execution when the victim opens the crafted playlist.
Description
Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.
Exploits (3)
This Metasploit module exploits a stack buffer overflow in Apple iTunes 4.7 via a malicious PLS file. It delivers a payload through an HTTP server, triggering arbitrary code execution when the victim opens the crafted playlist.
This exploit generates a malicious .pls file that, when loaded by iTunes on OS X 10.3.7, triggers a buffer overflow to execute shellcode binding a shell to port 4444. The shellcode is crafted to avoid null bytes and newlines.
This Metasploit module exploits a stack buffer overflow in Apple iTunes 4.7 by crafting a malicious PLS file. The exploit triggers arbitrary code execution via a specially formatted playlist file delivered over HTTP.