EIP-2026-118272

This exploit targets a buffer overflow vulnerability in Apple iTunes (up to version 4.7) by crafting a malicious .m3u playlist file. It overwrites the return address (EIP) with a 'push eax' instruction from kernel32.dll and executes a XOR-encrypted shellcode that downloads and executes a payload from a specified URL.