VAR-200709-0141
Vulnerability from variot - Updated: 2023-12-18 13:58Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file. Apple iTunes is prone to a heap-based buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. An attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. This issue affects versions prior to iTunes 7.4. Apple iTunes is a media player program. This overflow can be triggered if a user is tricked into opening a malicious music file, causing the player to terminate unexpectedly or execute arbitrary code.
BETA test the new Secunia Personal Software Inspector!
The Secunia PSI detects installed software on your computer and categorises it as either Insecure, End-of-Life, or Up-To-Date. Effectively enabling you to focus your attention on software installations where more secure versions are available from the vendors.
Download the free PSI BETA from the Secunia website: https://psi.secunia.com/
TITLE: Apple iTunes Music File Buffer Overflow Vulnerability
SECUNIA ADVISORY ID: SA26725
VERIFY ADVISORY: http://secunia.com/advisories/26725/
CRITICAL: Highly critical
IMPACT: DoS, System access
WHERE:
From remote
SOFTWARE: iTunes 7.x http://secunia.com/product/12131/ iTunes 6.x http://secunia.com/product/5882/ iTunes 5.x http://secunia.com/product/7864/ iTunes 4.x http://secunia.com/product/2916/
DESCRIPTION: A vulnerability has been reported in Apple iTunes, which can be exploited by malicious people to compromise a user's system.
The vulnerability is caused due to an unspecified boundary error when processing album cover art. This can be exploited to cause a buffer overflow via a specially crafted music file.
Successful exploitation may allow execution of arbitrary code.
SOLUTION: Update to version 7.4.
iTunes 7.4 for Mac: http://www.apple.com/support/downloads/itunes74formac.html
iTunes 7.4 for Windows: http://www.apple.com/support/downloads/itunes74forwindows.html
PROVIDED AND/OR DISCOVERED BY: The vendor credits David Thiel, iSEC Partners
ORIGINAL ADVISORY: http://docs.info.apple.com/article.html?artnum=306404
About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities.
Subscribe: http://secunia.com/secunia_security_advisories/
Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/
Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor.
Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org
Show details on source website
{
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/VARIoTentry#",
"affected_products": {
"@id": "https://www.variotdbs.pl/ref/affected_products"
},
"configurations": {
"@id": "https://www.variotdbs.pl/ref/configurations"
},
"credits": {
"@id": "https://www.variotdbs.pl/ref/credits"
},
"cvss": {
"@id": "https://www.variotdbs.pl/ref/cvss/"
},
"description": {
"@id": "https://www.variotdbs.pl/ref/description/"
},
"exploit_availability": {
"@id": "https://www.variotdbs.pl/ref/exploit_availability/"
},
"external_ids": {
"@id": "https://www.variotdbs.pl/ref/external_ids/"
},
"iot": {
"@id": "https://www.variotdbs.pl/ref/iot/"
},
"iot_taxonomy": {
"@id": "https://www.variotdbs.pl/ref/iot_taxonomy/"
},
"patch": {
"@id": "https://www.variotdbs.pl/ref/patch/"
},
"problemtype_data": {
"@id": "https://www.variotdbs.pl/ref/problemtype_data/"
},
"references": {
"@id": "https://www.variotdbs.pl/ref/references/"
},
"sources": {
"@id": "https://www.variotdbs.pl/ref/sources/"
},
"sources_release_date": {
"@id": "https://www.variotdbs.pl/ref/sources_release_date/"
},
"sources_update_date": {
"@id": "https://www.variotdbs.pl/ref/sources_update_date/"
},
"threat_type": {
"@id": "https://www.variotdbs.pl/ref/threat_type/"
},
"title": {
"@id": "https://www.variotdbs.pl/ref/title/"
},
"type": {
"@id": "https://www.variotdbs.pl/ref/type/"
}
},
"@id": "https://www.variotdbs.pl/vuln/VAR-200709-0141",
"affected_products": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/affected_products#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"model": "itunes",
"scope": "lte",
"trust": 1.0,
"vendor": "apple",
"version": "7.3.2"
},
{
"model": "itunes",
"scope": "eq",
"trust": 0.9,
"vendor": "apple",
"version": "7.3.2"
},
{
"model": "itunes",
"scope": "eq",
"trust": 0.8,
"vendor": "apple",
"version": "7.4"
},
{
"model": "esignal",
"scope": "eq",
"trust": 0.3,
"vendor": "esignal",
"version": "6.0.2"
},
{
"model": "itunes",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "7.3.1"
},
{
"model": "itunes",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "7.3"
},
{
"model": "itunes",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "7.0.2"
},
{
"model": "itunes",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "6.0.5"
},
{
"model": "itunes",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "6.0.4"
},
{
"model": "itunes",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "6.0.3"
},
{
"model": "itunes",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "6.0.1"
},
{
"model": "itunes",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "6.0"
},
{
"model": "itunes",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "5.0"
},
{
"model": "itunes",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "4.8"
},
{
"model": "itunes",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "4.7.1"
},
{
"model": "itunes",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "4.7"
},
{
"model": "itunes",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "4.6"
},
{
"model": "itunes",
"scope": "eq",
"trust": 0.3,
"vendor": "apple",
"version": "4.5"
},
{
"model": "itunes",
"scope": "ne",
"trust": 0.3,
"vendor": "apple",
"version": "7.4"
}
],
"sources": [
{
"db": "BID",
"id": "25567"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000676"
},
{
"db": "NVD",
"id": "CVE-2007-3752"
},
{
"db": "CNNVD",
"id": "CNNVD-200709-063"
}
]
},
"configurations": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/configurations#",
"children": {
"@container": "@list"
},
"cpe_match": {
"@container": "@list"
},
"data": {
"@container": "@list"
},
"nodes": {
"@container": "@list"
}
},
"data": [
{
"CVE_data_version": "4.0",
"nodes": [
{
"children": [],
"cpe_match": [
{
"cpe23Uri": "cpe:2.3:a:apple:itunes:*:*:*:*:*:*:*:*",
"cpe_name": [],
"versionEndIncluding": "7.3.2",
"vulnerable": true
}
],
"operator": "OR"
}
]
}
],
"sources": [
{
"db": "NVD",
"id": "CVE-2007-3752"
}
]
},
"credits": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/credits#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "David Thiel\u203b lx@redundancy.redundancy.org",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200709-063"
}
],
"trust": 0.6
},
"cve": "CVE-2007-3752",
"cvss": {
"@context": {
"cvssV2": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV2#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV2"
},
"cvssV3": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/cvss/cvssV3#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/cvssV3/"
},
"severity": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/cvss/severity#"
},
"@id": "https://www.variotdbs.pl/ref/cvss/severity"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
},
"@id": "https://www.variotdbs.pl/ref/sources"
}
},
"data": [
{
"cvssV2": [
{
"acInsufInfo": false,
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "NVD",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"obtainAllPrivilege": true,
"obtainOtherPrivilege": false,
"obtainUserPrivilege": false,
"severity": "HIGH",
"trust": 1.0,
"userInteractionRequired": true,
"vectorString": "AV:N/AC:M/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"acInsufInfo": null,
"accessComplexity": "Low",
"accessVector": "Local",
"authentication": "None",
"author": "NVD",
"availabilityImpact": "Complete",
"baseScore": 7.2,
"confidentialityImpact": "Complete",
"exploitabilityScore": null,
"id": "CVE-2007-3752",
"impactScore": null,
"integrityImpact": "Complete",
"obtainAllPrivilege": null,
"obtainOtherPrivilege": null,
"obtainUserPrivilege": null,
"severity": "High",
"trust": 0.8,
"userInteractionRequired": null,
"vectorString": "AV:L/AC:L/Au:N/C:C/I:C/A:C",
"version": "2.0"
},
{
"accessComplexity": "MEDIUM",
"accessVector": "NETWORK",
"authentication": "NONE",
"author": "VULHUB",
"availabilityImpact": "COMPLETE",
"baseScore": 9.3,
"confidentialityImpact": "COMPLETE",
"exploitabilityScore": 8.6,
"id": "VHN-27114",
"impactScore": 10.0,
"integrityImpact": "COMPLETE",
"severity": "HIGH",
"trust": 0.1,
"vectorString": "AV:N/AC:M/AU:N/C:C/I:C/A:C",
"version": "2.0"
}
],
"cvssV3": [],
"severity": [
{
"author": "NVD",
"id": "CVE-2007-3752",
"trust": 1.8,
"value": "HIGH"
},
{
"author": "CNNVD",
"id": "CNNVD-200709-063",
"trust": 0.6,
"value": "CRITICAL"
},
{
"author": "VULHUB",
"id": "VHN-27114",
"trust": 0.1,
"value": "HIGH"
}
]
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-27114"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000676"
},
{
"db": "NVD",
"id": "CVE-2007-3752"
},
{
"db": "CNNVD",
"id": "CNNVD-200709-063"
}
]
},
"description": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/description#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file. Apple iTunes is prone to a heap-based buffer-overflow vulnerability because the application fails to bounds-check user-supplied data before copying it into an insufficiently sized buffer. \nAn attacker can exploit this issue to execute arbitrary code within the context of the affected application. Failed exploit attempts will result in a denial-of-service condition. \nThis issue affects versions prior to iTunes 7.4. Apple iTunes is a media player program. This overflow can be triggered if a user is tricked into opening a malicious music file, causing the player to terminate unexpectedly or execute arbitrary code. \n\n----------------------------------------------------------------------\n\nBETA test the new Secunia Personal Software Inspector!\n\nThe Secunia PSI detects installed software on your computer and\ncategorises it as either Insecure, End-of-Life, or Up-To-Date. \nEffectively enabling you to focus your attention on software\ninstallations where more secure versions are available from the\nvendors. \n\nDownload the free PSI BETA from the Secunia website:\nhttps://psi.secunia.com/\n\n----------------------------------------------------------------------\n\nTITLE:\nApple iTunes Music File Buffer Overflow Vulnerability\n\nSECUNIA ADVISORY ID:\nSA26725\n\nVERIFY ADVISORY:\nhttp://secunia.com/advisories/26725/\n\nCRITICAL:\nHighly critical\n\nIMPACT:\nDoS, System access\n\nWHERE:\n\u003eFrom remote\n\nSOFTWARE:\niTunes 7.x\nhttp://secunia.com/product/12131/\niTunes 6.x\nhttp://secunia.com/product/5882/\niTunes 5.x\nhttp://secunia.com/product/7864/\niTunes 4.x\nhttp://secunia.com/product/2916/\n\nDESCRIPTION:\nA vulnerability has been reported in Apple iTunes, which can be\nexploited by malicious people to compromise a user\u0027s system. \n\nThe vulnerability is caused due to an unspecified boundary error when\nprocessing album cover art. This can be exploited to cause a buffer\noverflow via a specially crafted music file. \n\nSuccessful exploitation may allow execution of arbitrary code. \n\nSOLUTION:\nUpdate to version 7.4. \n\niTunes 7.4 for Mac:\nhttp://www.apple.com/support/downloads/itunes74formac.html\n\niTunes 7.4 for Windows:\nhttp://www.apple.com/support/downloads/itunes74forwindows.html\n\nPROVIDED AND/OR DISCOVERED BY:\nThe vendor credits David Thiel, iSEC Partners\n\nORIGINAL ADVISORY:\nhttp://docs.info.apple.com/article.html?artnum=306404\n\n----------------------------------------------------------------------\n\nAbout:\nThis Advisory was delivered by Secunia as a free service to help\neverybody keeping their systems up to date against the latest\nvulnerabilities. \n\nSubscribe:\nhttp://secunia.com/secunia_security_advisories/\n\nDefinitions: (Criticality, Where etc.)\nhttp://secunia.com/about_secunia_advisories/\n\n\nPlease Note:\nSecunia recommends that you verify all advisories you receive by\nclicking the link. \nSecunia NEVER sends attached files with advisories. \nSecunia does not advise people to install third party patches, only\nuse those supplied by the vendor. \n\n----------------------------------------------------------------------\n\nUnsubscribe: Secunia Security Advisories\nhttp://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org\n\n----------------------------------------------------------------------\n\n\n",
"sources": [
{
"db": "NVD",
"id": "CVE-2007-3752"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000676"
},
{
"db": "BID",
"id": "25567"
},
{
"db": "VULHUB",
"id": "VHN-27114"
},
{
"db": "PACKETSTORM",
"id": "59115"
}
],
"trust": 2.07
},
"external_ids": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/external_ids#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"db": "BID",
"id": "25567",
"trust": 2.8
},
{
"db": "NVD",
"id": "CVE-2007-3752",
"trust": 2.8
},
{
"db": "SECUNIA",
"id": "26725",
"trust": 2.6
},
{
"db": "SECTRACK",
"id": "1018658",
"trust": 2.5
},
{
"db": "VUPEN",
"id": "ADV-2007-3073",
"trust": 1.7
},
{
"db": "OSVDB",
"id": "38528",
"trust": 1.7
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000676",
"trust": 0.8
},
{
"db": "XF",
"id": "36485",
"trust": 0.6
},
{
"db": "BUGTRAQ",
"id": "20070906 ITUNES 7.3.X - HEAP OVERFLOW IN ALBUM COVER PARSING",
"trust": 0.6
},
{
"db": "APPLE",
"id": "APPLE-SA-2007-09-06",
"trust": 0.6
},
{
"db": "CNNVD",
"id": "CNNVD-200709-063",
"trust": 0.6
},
{
"db": "VULHUB",
"id": "VHN-27114",
"trust": 0.1
},
{
"db": "PACKETSTORM",
"id": "59115",
"trust": 0.1
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-27114"
},
{
"db": "BID",
"id": "25567"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000676"
},
{
"db": "PACKETSTORM",
"id": "59115"
},
{
"db": "NVD",
"id": "CVE-2007-3752"
},
{
"db": "CNNVD",
"id": "CNNVD-200709-063"
}
]
},
"id": "VAR-200709-0141",
"iot": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/iot#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": true,
"sources": [
{
"db": "VULHUB",
"id": "VHN-27114"
}
],
"trust": 0.01
},
"last_update_date": "2023-12-18T13:58:18.669000Z",
"patch": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/patch#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"title": "iTunes 7.4.1 for Mac",
"trust": 0.8,
"url": "http://www.apple.com/support/downloads/itunes741formac.html"
},
{
"title": "iTunes 7.4.1 for Windows",
"trust": 0.8,
"url": "http://www.apple.com/support/downloads/itunes741forwindows.html"
},
{
"title": "About the security content of iTunes 7.4",
"trust": 0.8,
"url": "http://docs.info.apple.com/article.html?artnum=306404-en"
},
{
"title": "About the security content of iTunes 7.4",
"trust": 0.8,
"url": "http://docs.info.apple.com/article.html?artnum=306404-ja"
},
{
"title": "iTunes 7.4.1 for Mac",
"trust": 0.8,
"url": "http://www.apple.com/jp/ftp-info/reference/itunes741formac.html"
},
{
"title": "iTunes 7.4.1 for Windows",
"trust": 0.8,
"url": "http://www.apple.com/jp/ftp-info/reference/itunes741forwindows.html"
}
],
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2007-000676"
}
]
},
"problemtype_data": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/problemtype_data#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"problemtype": "CWE-119",
"trust": 1.9
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-27114"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000676"
},
{
"db": "NVD",
"id": "CVE-2007-3752"
}
]
},
"references": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/references#",
"data": {
"@container": "@list"
},
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": [
{
"trust": 2.5,
"url": "http://www.securityfocus.com/bid/25567"
},
{
"trust": 2.5,
"url": "http://www.securitytracker.com/id?1018658"
},
{
"trust": 2.5,
"url": "http://secunia.com/advisories/26725"
},
{
"trust": 2.1,
"url": "http://docs.info.apple.com/article.html?artnum=306404"
},
{
"trust": 1.7,
"url": "http://lists.apple.com/archives/security-announce/2007/sep/msg00000.html"
},
{
"trust": 1.7,
"url": "https://www.isecpartners.com/advisories/2007-005-itunes.txt"
},
{
"trust": 1.7,
"url": "http://osvdb.org/38528"
},
{
"trust": 1.4,
"url": "http://www.frsirt.com/english/advisories/2007/3073"
},
{
"trust": 1.1,
"url": "http://www.securityfocus.com/archive/1/478750/100/0/threaded"
},
{
"trust": 1.1,
"url": "https://oval.cisecurity.org/repository/search/definition/oval%3aorg.mitre.oval%3adef%3a17303"
},
{
"trust": 1.1,
"url": "http://www.vupen.com/english/advisories/2007/3073"
},
{
"trust": 1.1,
"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/36485"
},
{
"trust": 0.8,
"url": "http://cve.mitre.org/cgi-bin/cvename.cgi?name=cve-2007-3752"
},
{
"trust": 0.8,
"url": "http://nvd.nist.gov/nvd.cfm?cvename=cve-2007-3752"
},
{
"trust": 0.6,
"url": "http://xforce.iss.net/xforce/xfdb/36485"
},
{
"trust": 0.6,
"url": "http://www.securityfocus.com/archive/1/archive/1/478750/100/0/threaded"
},
{
"trust": 0.3,
"url": "http://www.apple.com/itunes/"
},
{
"trust": 0.3,
"url": "/archive/1/478750"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/2916/"
},
{
"trust": 0.1,
"url": "http://secunia.com/secunia_security_advisories/"
},
{
"trust": 0.1,
"url": "http://secunia.com/about_secunia_advisories/"
},
{
"trust": 0.1,
"url": "https://psi.secunia.com/"
},
{
"trust": 0.1,
"url": "http://www.apple.com/support/downloads/itunes74forwindows.html"
},
{
"trust": 0.1,
"url": "http://secunia.com/advisories/26725/"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/5882/"
},
{
"trust": 0.1,
"url": "http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/12131/"
},
{
"trust": 0.1,
"url": "http://www.apple.com/support/downloads/itunes74formac.html"
},
{
"trust": 0.1,
"url": "http://secunia.com/product/7864/"
}
],
"sources": [
{
"db": "VULHUB",
"id": "VHN-27114"
},
{
"db": "BID",
"id": "25567"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000676"
},
{
"db": "PACKETSTORM",
"id": "59115"
},
{
"db": "NVD",
"id": "CVE-2007-3752"
},
{
"db": "CNNVD",
"id": "CNNVD-200709-063"
}
]
},
"sources": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#",
"data": {
"@container": "@list"
}
},
"data": [
{
"db": "VULHUB",
"id": "VHN-27114"
},
{
"db": "BID",
"id": "25567"
},
{
"db": "JVNDB",
"id": "JVNDB-2007-000676"
},
{
"db": "PACKETSTORM",
"id": "59115"
},
{
"db": "NVD",
"id": "CVE-2007-3752"
},
{
"db": "CNNVD",
"id": "CNNVD-200709-063"
}
]
},
"sources_release_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_release_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2007-09-06T00:00:00",
"db": "VULHUB",
"id": "VHN-27114"
},
{
"date": "2007-09-05T00:00:00",
"db": "BID",
"id": "25567"
},
{
"date": "2007-09-14T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2007-000676"
},
{
"date": "2007-09-07T06:01:27",
"db": "PACKETSTORM",
"id": "59115"
},
{
"date": "2007-09-06T21:17:00",
"db": "NVD",
"id": "CVE-2007-3752"
},
{
"date": "2007-09-06T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200709-063"
}
]
},
"sources_update_date": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources_update_date#",
"data": {
"@container": "@list"
}
},
"data": [
{
"date": "2018-10-15T00:00:00",
"db": "VULHUB",
"id": "VHN-27114"
},
{
"date": "2007-09-07T21:51:00",
"db": "BID",
"id": "25567"
},
{
"date": "2007-09-14T00:00:00",
"db": "JVNDB",
"id": "JVNDB-2007-000676"
},
{
"date": "2018-10-15T21:30:43.270000",
"db": "NVD",
"id": "CVE-2007-3752"
},
{
"date": "2009-02-05T00:00:00",
"db": "CNNVD",
"id": "CNNVD-200709-063"
}
]
},
"threat_type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/threat_type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "remote",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200709-063"
}
],
"trust": 0.6
},
"title": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/title#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "Apple iTunes Vulnerable to buffer overflow in handling music files",
"sources": [
{
"db": "JVNDB",
"id": "JVNDB-2007-000676"
}
],
"trust": 0.8
},
"type": {
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/type#",
"sources": {
"@container": "@list",
"@context": {
"@vocab": "https://www.variotdbs.pl/ref/sources#"
}
}
},
"data": "buffer overflow",
"sources": [
{
"db": "CNNVD",
"id": "CNNVD-200709-063"
}
],
"trust": 0.6
}
}
Loading…
Loading…
Experimental. This forecast is provided for visualization only and may change without notice. Do not use it for operational decisions.
Forecast uses a logistic model when the trend is rising, or an exponential decay model when the trend is falling. Fitted via linearized least squares.
Sightings
| Author | Source | Type | Date | Other |
|---|
Nomenclature
- Seen: The vulnerability was mentioned, discussed, or observed by the user.
- Confirmed: The vulnerability has been validated from an analyst's perspective.
- Published Proof of Concept: A public proof of concept is available for this vulnerability.
- Exploited: The vulnerability was observed as exploited by the user who reported the sighting.
- Patched: The vulnerability was observed as successfully patched by the user who reported the sighting.
- Not exploited: The vulnerability was not observed as exploited by the user who reported the sighting.
- Not confirmed: The user expressed doubt about the validity of the vulnerability.
- Not patched: The vulnerability was not observed as successfully patched by the user who reported the sighting.
Loading…
Loading…