CVE-2013-1035: Buffer Overflow
Published Sep 19, 2013
·Updated
The iTunes ActiveX control in Apple iTunes before 11.1 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption) via a crafted web site.
Affected Software
6 affected components
Apple iTunes<=11.0.5
Apple iTunes=11.0
Apple iTunes=11.0.1
Apple iTunes=11.0.2
Apple iTunes=11.0.3
Apple iTunes=11.0.4
Remediation
Event History
Sep 19, 2013
CVE Published
via MITRE·10:00 AM
Data Sourced
via MITRE·10:00 AM
Description
Frequently Asked Questions
1
What is the severity of CVE-2013-1035?
CVE-2013-1035 is considered critical due to its potential to allow remote code execution.
2
How do I fix CVE-2013-1035?
To fix CVE-2013-1035, upgrade Apple iTunes to version 11.1 or later.
3
Which versions of iTunes are affected by CVE-2013-1035?
CVE-2013-1035 affects Apple iTunes versions prior to 11.1, including 11.0 and earlier.
4
Can CVE-2013-1035 cause a denial of service?
Yes, CVE-2013-1035 can cause a denial of service due to memory corruption.
5
Is CVE-2013-1035 specific to a certain operating system?
CVE-2013-1035 primarily affects the Windows version of Apple iTunes due to its use of an ActiveX control.