CVE-2005-1248

HighCVSS 7.5/10Last modified Jun 16, 2026

Description

Buffer overflow in Apple iTunes before 4.8 allows remote attackers to execute arbitrary code via a crafted MPEG4 file.

Metrics

CVSS 2.0 7.5/10AV:N/AC:L/Au:N/C:P/I:P/A:P

Affected software

Vendor	Product	Versions
n/a	n/a	n/a

References

http://docs.info.apple.com/article.html?artnum=301596
http://lists.apple.com/archives/security-announce/2005/May/msg00003.htmlPatch, Vendor Advisory
http://secunia.com/advisories/15310Patch, Vendor Advisory
http://securitytracker.com/id?1013927Patch, Vendor Advisory
http://www.ngssoftware.com/advisories/itunes.txt
http://www.osvdb.org/16243Vendor Advisory
http://www.securityfocus.com/bid/13565Patch, Vendor Advisory
http://www.vupen.com/english/advisories/2005/0504
https://exchange.xforce.ibmcloud.com/vulnerabilities/20498
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17304
http://docs.info.apple.com/article.html?artnum=301596
http://lists.apple.com/archives/security-announce/2005/May/msg00003.htmlPatch, Vendor Advisory
http://secunia.com/advisories/15310Patch, Vendor Advisory
http://securitytracker.com/id?1013927Patch, Vendor Advisory
http://www.ngssoftware.com/advisories/itunes.txt
http://www.osvdb.org/16243Vendor Advisory
http://www.securityfocus.com/bid/13565Patch, Vendor Advisory
http://www.vupen.com/english/advisories/2005/0504
https://exchange.xforce.ibmcloud.com/vulnerabilities/20498
https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A17304

Timeline

Published: May 16, 2005
Last modified: Jun 16, 2026
NVD status: Modified

Related CVEs from 2005

CVE-2005-12495.0The IMAP daemon (IMAPD32.EXE) in Ipswitch Collaboration Suite (ICS) allows remote attackers to cause a denial of service (CPU consumption) v CVE-2005-12507.5SQL injection vulnerability in the logon screen of the web front end (NmConsole/Login.asp) for IpSwitch WhatsUp Professional 2005 SP1 allows CVE-2005-12525.0Directory traversal vulnerability in the Web Calendaring server in Ipswitch Imail 8.13, and other versions before IMail Server 8.2 Hotfix 2,CVE-2005-12545.0Stack-based buffer overflow in the IMAP server for Ipswitch IMail 8.12 and 8.13, and other versions before IMail Server 8.2 Hotfix 2, allows CVE-2005-125510.0Multiple stack-based buffer overflows in the IMAP server in IMail 8.12 and 8.13 in Ipswitch Collaboration Suite (ICS), and other versions be CVE-2005-125610.0Stack-based buffer overflow in the IMAP daemon (IMAPD32.EXE) in IMail 8.13 in Ipswitch Collaboration Suite (ICS), and other versions before CVE-2005-12605.0bzip2 allows remote attackers to cause a denial of service (hard drive consumption) via a crafted bzip2 file that causes an infinite loop (a CVE-2005-12617.5Stack-based buffer overflow in the URL parsing function in Gaim before 1.3.0 allows remote attackers to execute arbitrary code via an instan CVE-2005-12625.0Gaim 1.2.1 and earlier allows remote attackers to cause a denial of service (application crash) via a malformed MSN message.CVE-2005-12637.2The elf_core_dump function in binfmt_elf.c for Linux kernel 2.x.x to 2.2.27-rc2, 2.4.x to 2.4.31-pre1, and 2.6.x to 2.6.12-rc4 allows local CVE-2005-12647.2Raw character devices (raw.c) in the Linux kernel 2.6.x call the wrong function before passing an ioctl to the block device, which crosses s CVE-2005-12652.1The mmap function in the Linux Kernel 2.6.10 can be used to create memory maps with a start address beyond the end address, which allows loc