CVE-2005-0043

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://lists.apple.com/archives/security-announce/2005/Jan/msg00000.htmlPatch
http://secunia.com/advisories/13804
http://securitytracker.com/id?1012839
http://www.idefense.com/application/poi/display?id=180&type=vulnerabilitiesExploit, Patch
http://www.kb.cert.org/vuls/id/377368Patch, Third Party Advisory, US Government Resource
http://www.osvdb.org/12833
http://www.securityfocus.com/bid/12238
https://exchange.xforce.ibmcloud.com/vulnerabilities/18851
http://lists.apple.com/archives/security-announce/2005/Jan/msg00000.htmlPatch
http://secunia.com/advisories/13804
http://securitytracker.com/id?1012839
http://www.idefense.com/application/poi/display?id=180&type=vulnerabilitiesExploit, Patch
http://www.kb.cert.org/vuls/id/377368Patch, Third Party Advisory, US Government Resource
http://www.osvdb.org/12833
http://www.securityfocus.com/bid/12238
https://exchange.xforce.ibmcloud.com/vulnerabilities/18851

Timeline

Published: May 2, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-00447.5The OLE component in Windows 98, 2000, XP, and Server 2003, and Exchange Server 5.0 through 2003, does not properly validate the lengths of CVE-2005-00457.5The Server Message Block (SMB) implementation for Windows NT 4.0, 2000, XP, and Server 2003 does not properly validate certain SMB packets, CVE-2005-00477.2Windows 2000, XP, and Server 2003 does not properly "validate the use of memory regions" for COM structured storage files, which allows atta CVE-2005-00487.5Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Server 2003, and older operating systems allows remote attackers to cause a denial o CVE-2005-00494.3Windows SharePoint Services and SharePoint Team Services for Windows Server 2003 does not properly validate an HTTP redirection query, which CVE-2005-005010.0The License Logging service for Windows NT Server, Windows 2000 Server, and Windows Server 2003 does not properly validate the length of mes CVE-2005-00517.5The Server service (srvsvc.dll) in Windows XP SP1 and SP2 allows remote attackers to obtain sensitive information (users who are accessing r CVE-2005-00537.5Internet Explorer 5.01, 5.5, and 6 allows remote attackers to execute arbitrary code via drag and drop events, aka the "Drag-and-Drop Vulner CVE-2005-00545.1Internet Explorer 5.01, 5.5, and 6 allows remote attackers to spoof a less restrictive security zone and execute arbitrary code via an HTML CVE-2005-00557.5Internet Explorer 5.01, 5.5, and 6 does not properly validate buffers when handling certain DHTML methods including the createControlRange J CVE-2005-00565.1Internet Explorer 5.01, 5.5, and 6 does not properly validate certain URLs in Channel Definition Format (CDF) files, which allows remote att CVE-2005-00577.5The Hyperlink Object Library for Windows 98, 2000, XP, and Server 2003 allows remote attackers to execute arbitrary code via a crafted link