Exploitation Summary
EIP tracks 2 public exploits for CVE-2012-0677. PoCs published by Metasploit, LiquidWorm.
AI-analyzed exploit summary This Metasploit module exploits a stack buffer overflow in iTunes 10.4.0.80 to 10.6.1.7 via a maliciously crafted extended M3U file, achieving remote code execution by overwriting SEH handlers and leveraging ROP chains.
Description
Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .m3u playlist.
Exploits (2)
This Metasploit module exploits a stack buffer overflow in iTunes 10.4.0.80 to 10.6.1.7 via a maliciously crafted extended M3U file, achieving remote code execution by overwriting SEH handlers and leveraging ROP chains.
This exploit leverages a heap-based buffer overflow in Apple iTunes 10.6.1.7 and 10.6.0.40 by crafting a malicious .M3U playlist file. The PoC demonstrates arbitrary code execution via a specially formatted file with excessive 'A' characters to trigger the overflow.