CVE-2005-0043

This Metasploit module exploits a stack buffer overflow in Apple iTunes 4.7 via a malicious PLS file. It delivers a payload through an HTTP server, triggering arbitrary code execution when the victim opens the crafted playlist.

This exploit generates a malicious .pls file that, when loaded by iTunes on OS X 10.3.7, triggers a buffer overflow to execute shellcode binding a shell to port 4444. The shellcode is crafted to avoid null bytes and newlines.

This Metasploit module exploits a stack buffer overflow in Apple iTunes 4.7 by crafting a malicious PLS file. The exploit triggers arbitrary code execution via a specially formatted playlist file delivered over HTTP.