CVE-2009-2817
Apple iTunes < 9.0.1 - Remote Code Execution via Crafted .pls File
Title source: llmExploitation Summary
EIP tracks 2 public exploits for CVE-2009-2817. PoCs published by S2 Crew, Roger Hart.
AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in iTunes 9.0 by crafting a malicious .pls file. The payload manipulates heap memory to achieve arbitrary code execution via a crafted playlist file.
Description
Buffer overflow in Apple iTunes before 9.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .pls file.
Exploits (2)
This exploit targets a buffer overflow vulnerability in iTunes 9.0 by crafting a malicious .pls file. The payload manipulates heap memory to achieve arbitrary code execution via a crafted playlist file.
This exploit targets a buffer overflow vulnerability in Apple iTunes versions prior to 9.0.1. It crafts a malicious .pls playlist file to trigger arbitrary code execution via a heap-based overflow, leveraging specific memory addresses and ROP-like techniques.