CVE-2012-0677

This Metasploit module exploits a stack buffer overflow in iTunes 10.4.0.80 to 10.6.1.7 via a maliciously crafted extended M3U file, achieving remote code execution by overwriting SEH handlers and leveraging ROP chains.

This exploit leverages a heap-based buffer overflow in Apple iTunes 10.6.1.7 and 10.6.0.40 by crafting a malicious .M3U playlist file. The PoC demonstrates arbitrary code execution via a specially formatted file with excessive 'A' characters to trigger the overflow.