Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later, and Windows XP and 2000, allows remote user-assisted attackers to execute arbitrary code via an AAC (M4P, M4A, or M4B) file with a sample table size (STSZ) atom with a "malformed" sample_size_table value.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apple iTunes AAC文件解析 整数溢出漏洞
Vulnerability Description
Apple iTunes是一款媒体播放程序。 Apple iTunes在处理恶意的AAC媒体文件(如.M4A和.M4P扩展名文件)存在溢出漏洞，远程攻击者可能利用此漏洞在服务器上执行任意指令。 在解析STSZ时畸形的sample_size_table值可能触发整数溢出，导致执行任意指令。
CVSS Information
N/A
Vulnerability Type
N/A