First published: Wed Mar 31 2010(Updated: )
Apple iTunes before 9.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 podcast file.
Credit: product-security@apple.com
Affected Software | Affected Version | How to fix |
---|---|---|
iTunes | <=9.0.3 | |
iTunes | <=9.0.3 | |
iTunes | =9.0 | |
iTunes | =9.0 | |
iTunes | =9.0.0 | |
iTunes | =9.0.0 | |
iTunes | =9.0.1 | |
iTunes | =9.0.1 | |
iTunes | =9.0.2 | |
iTunes | =9.0.2 | |
Apple iOS and macOS | =10.4.11 | |
Apple iOS and macOS | =10.5 | |
Apple iOS and macOS | =10.5.0 | |
Apple iOS and macOS | =10.5.1 | |
Apple iOS and macOS | =10.5.2 | |
Apple iOS and macOS | =10.5.3 | |
Apple iOS and macOS | =10.5.4 | |
Apple iOS and macOS | =10.5.5 | |
Apple iOS and macOS | =10.5.6 | |
Apple iOS and macOS | =10.5.7 | |
Apple iOS and macOS | =10.5.8 | |
Apple iOS and macOS | =10.6.0 | |
Apple iOS and macOS | =10.6.1 | |
Apple iOS and macOS | =10.6.2 | |
Apple iOS and macOS | =10.6.3 | |
Apple iOS and macOS | =10.4.11 | |
Apple iOS and macOS | =10.5 | |
Apple iOS and macOS | =10.5.0 | |
Apple iOS and macOS | =10.5.1 | |
Apple iOS and macOS | =10.5.2 | |
Apple iOS and macOS | =10.5.3 | |
Apple iOS and macOS | =10.5.4 | |
Apple iOS and macOS | =10.5.5 | |
Apple iOS and macOS | =10.5.6 | |
Apple iOS and macOS | =10.5.7 | |
Apple iOS and macOS | =10.5.8 | |
Apple iOS and macOS | =10.6.0 | |
Apple iOS and macOS | =10.6.1 | |
Apple iOS and macOS | =10.6.2 | |
Apple iOS and macOS | =10.6.3 | |
Microsoft Windows 7 | ||
Microsoft Windows Vista | ||
Microsoft Windows XP | ||
All of | ||
Any of | ||
iTunes | <=9.0.3 | |
iTunes | <=9.0.3 | |
iTunes | =9.0 | |
iTunes | =9.0 | |
iTunes | =9.0.0 | |
iTunes | =9.0.0 | |
iTunes | =9.0.1 | |
iTunes | =9.0.1 | |
iTunes | =9.0.2 | |
iTunes | =9.0.2 | |
Any of | ||
Apple iOS and macOS | =10.4.11 | |
Apple iOS and macOS | =10.5 | |
Apple iOS and macOS | =10.5.0 | |
Apple iOS and macOS | =10.5.1 | |
Apple iOS and macOS | =10.5.2 | |
Apple iOS and macOS | =10.5.3 | |
Apple iOS and macOS | =10.5.4 | |
Apple iOS and macOS | =10.5.5 | |
Apple iOS and macOS | =10.5.6 | |
Apple iOS and macOS | =10.5.7 | |
Apple iOS and macOS | =10.5.8 | |
Apple iOS and macOS | =10.6.0 | |
Apple iOS and macOS | =10.6.1 | |
Apple iOS and macOS | =10.6.2 | |
Apple iOS and macOS | =10.6.3 | |
Apple iOS and macOS | =10.4.11 | |
Apple iOS and macOS | =10.5 | |
Apple iOS and macOS | =10.5.0 | |
Apple iOS and macOS | =10.5.1 | |
Apple iOS and macOS | =10.5.2 | |
Apple iOS and macOS | =10.5.3 | |
Apple iOS and macOS | =10.5.4 | |
Apple iOS and macOS | =10.5.5 | |
Apple iOS and macOS | =10.5.6 | |
Apple iOS and macOS | =10.5.7 | |
Apple iOS and macOS | =10.5.8 | |
Apple iOS and macOS | =10.6.0 | |
Apple iOS and macOS | =10.6.1 | |
Apple iOS and macOS | =10.6.2 | |
Apple iOS and macOS | =10.6.3 | |
Microsoft Windows 7 | ||
Microsoft Windows Vista | ||
Microsoft Windows XP |
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
CVE-2010-0531 has been categorized as having a high severity due to its potential to cause a denial of service.
To fix CVE-2010-0531, it is recommended to update Apple iTunes to version 9.1 or later.
CVE-2010-0531 affects Apple iTunes versions prior to 9.1, including versions 9.0.3 and earlier.
Yes, CVE-2010-0531 can be exploited by remote attackers through a specially crafted MP4 podcast file.
By exploiting CVE-2010-0531, an attacker could cause the iTunes application to enter an infinite loop, resulting in a denial of service.