bugtraq - Apple iTunes DAAP Messages Handling Denial of Service Vulnerability .

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Fri, 13 Mar 2009 09:59:57 +0800
From: "secresearch@...tinet.com" <secresearch@...tinet.com>
To: "full-disclosure" <full-disclosure@...ts.grok.org.uk>,
	"bugtraq" <bugtraq@...urityfocus.com>
Subject: Apple iTunes DAAP Messages Handling Denial of Service Vulnerability . 

Apple iTunes DAAP Messages Handling Denial of Service Vulnerability . . 
2009.Mar.13 . 

Fortinet's FortiGuard Global Security Research Team Discovers Vulnerability in Apple iTunes.

Summary: . 
========. 
    A DoS vulnerability in Apple iTunes through a maliciously crafted DAAP message.. 

Impact:. 
.=======

    Denial of service.. 
. 
Risk: . 
=====

    Medium . 
. 
Affected Software: . 
.==================

    Apple iTunes 8 for Windows, other versions may be affected. . 
    This issue does not affect Mac OS X systems. 

References: . 
===========
. 
	FortiGuard Advisory:     http://www.fortiguardcenter.com/advisory/FGA-2009-11.html
    Apple Security Bulletin: http://support.apple.com/kb/HT3487 . 
    Apple Security Updates:  http://support.apple.com/kb/ht1222 . 
    CVE ID: CVE-2009-0016 .   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2009-0016
. 
Acknowledgments: . . 
.================

    Xiaopeng Zhang, Zhenhua Liu, and Junfeng Jia of Fortinet's FortiGuard Global Security Research Team. 

*** This email and any attachments thereto may contain private, confidential, and privileged material for the sole use of the intended recipient.  Any review, copying, or distribution of this email (or any attachments thereto) by others is strictly prohibited.  If you are not the intended recipient, please contact the sender immediately and permanently delete the original and any copies of this email and any attachments thereto. ***