CVE-2007-1008: Low severity Apple iTunes vulnerability
Apple iTunes 7.0.2 allows user-assisted remote attackers to cause a denial of service (application crash) via a crafted XML list of radio stations, which results in memory corruption. NOTE: iTunes retrieves the XML document from a static URL, which requires an attacker to perform DNS spoofing or man-in-the-middle attacks for exploitation.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2007-1008?
CVE-2007-1008 has a severity classification that suggests it can lead to a denial of service through application crashes.
How do I fix CVE-2007-1008?
To mitigate CVE-2007-1008, users should upgrade to a newer version of Apple iTunes that addresses this vulnerability.
What causes the vulnerability in CVE-2007-1008?
CVE-2007-1008 is caused by memory corruption due to a crafted XML list of radio stations in Apple iTunes.
Is there a workaround for CVE-2007-1008?
A potential workaround for CVE-2007-1008 includes avoiding the use of radio station features that rely on XML lists.
Who is affected by CVE-2007-1008?
CVE-2007-1008 affects users of Apple iTunes version 7.0.2 on Windows.