CVE-2012-0677: Buffer Overflow
Published Jun 12, 2012
·Updated
Heap-based buffer overflow in Apple iTunes before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .m3u playlist.
Affected Software
21 affected components
Apple iTunes<=10.6.1
Apple iTunes=10.0
Apple iTunes=10.0.1
Apple iTunes=10.1
Apple iTunes=10.1.1
Apple iTunes=10.1.1.4
Apple iTunes=10.1.2
Apple iTunes=10.2
Apple iTunes=10.2.2.12
Apple iTunes=10.3
Apple iTunes=10.3.1
Apple iTunes=10.4
Apple iTunes=10.4.0.80
Apple iTunes=10.4.1
Apple iTunes=10.4.1.10
Apple iTunes=10.5
Apple iTunes=10.5.1
Apple iTunes=10.5.1.42
Apple iTunes=10.5.2
Apple iTunes=10.5.3
Apple iTunes=10.6
Event History
Jun 12, 2012
CVE Published
via MITRE·02:00 PM
Data Sourced
via MITRE·02:00 PM
Description
Frequently Asked Questions
1
What is the severity of CVE-2012-0677?
CVE-2012-0677 is rated as a high severity vulnerability due to its potential for remote code execution.
2
How do I fix CVE-2012-0677?
To fix CVE-2012-0677, update Apple iTunes to version 10.6.3 or later.
3
What versions of Apple iTunes are affected by CVE-2012-0677?
CVE-2012-0677 affects Apple iTunes versions prior to 10.6.3, including all versions from 10.0 to 10.6.2.
4
Can CVE-2012-0677 result in data loss?
Yes, CVE-2012-0677 can lead to application crashes that may result in temporary data loss.
5
Is there a workaround for CVE-2012-0677?
As a workaround for CVE-2012-0677, users should avoid opening .m3u playlists from untrusted sources until the software is updated.