EIP-2026-118272

PRE-CVE

Apple iTunes - Playlist Buffer Overflow Download Shellcode

Title source: legacy
STIX 2.1

Exploitation Summary

EIP tracks 1 public exploit for EIP-2026-118272. PoCs published by ATmaCA.

AI-analyzed exploit summary This exploit targets a buffer overflow vulnerability in Apple iTunes (up to version 4.7) by crafting a malicious .m3u playlist file. It overwrites the return address (EIP) with a 'push eax' instruction from kernel32.dll and executes a XOR-encrypted shellcode that downloads and executes a payload from a specified URL.

Description

Apple iTunes - Playlist Buffer Overflow Download Shellcode

Exploits (1)

exploitdb WORKING POC VERIFIED
by ATmaCA · c++remotewindows
https://www.exploit-db.com/exploits/759

This exploit targets a buffer overflow vulnerability in Apple iTunes (up to version 4.7) by crafting a malicious .m3u playlist file. It overwrites the return address (EIP) with a 'push eax' instruction from kernel32.dll and executes a XOR-encrypted shellcode that downloads and executes a payload from a specified URL.

Classification
Working Poc 95%
Attack Type
Rce
Complexity
Moderate
Reliability
Reliable
Target: Apple iTunes <= 4.7
No auth needed
Prerequisites: Target must open the malicious .m3u file with a vulnerable version of iTunes · Attacker must host a payload at a specified URL
devstral-2 · analyzed Feb 16, 2026 Full analysis →

Details

Status pre_cve
Tracked Since Feb 18, 2026