CVE-2010-0531

Published: Mar 31, 2010Modified: Apr 29, 2026

4.3

Vector

AV:N/AC:M/Au:N/C:N/I:N/A:P

Exploitability: 8.6 / Impact: 2.9

Source: NVD

Description

Apple iTunes before 9.1 allows remote attackers to cause a denial of service (infinite loop) via a crafted MP4 podcast file.

Affected (10)

Products: Apple: Itunes

1 product

Configuration A

10 vulnerable · 33 platform

Vulnerable Software	Affected Versions
Apple Itunes	Up to 9.0.3
Apple Itunes	Up to 9.0.3
Apple Itunes	Version 9.0.0
Apple Itunes	Version 9.0.0
Apple Itunes	Version 9.0.1
Apple Itunes	Version 9.0.1
Apple Itunes	Version 9.0.2
Apple Itunes	Version 9.0.2
Apple Itunes	Version 9.0
Apple Itunes	Version 9.0

Running on/with	Platform Versions
Apple Mac Os X	Version 10.4.11
Apple Mac Os X	Version 10.5.0
Apple Mac Os X	Version 10.5.1
Apple Mac Os X	Version 10.5.2
Apple Mac Os X	Version 10.5.3
Apple Mac Os X	Version 10.5.4
Apple Mac Os X	Version 10.5.5
Apple Mac Os X	Version 10.5.6
Apple Mac Os X	Version 10.5.7
Apple Mac Os X	Version 10.5.8
Apple Mac Os X	Version 10.5
Apple Mac Os X	Version 10.6.0
Apple Mac Os X	Version 10.6.1
Apple Mac Os X	Version 10.6.2
Apple Mac Os X	Version 10.6.3
Apple Mac Os X Server	Version 10.4.11
Apple Mac Os X Server	Version 10.5.0
Apple Mac Os X Server	Version 10.5.1
Apple Mac Os X Server	Version 10.5.2
Apple Mac Os X Server	Version 10.5.3
Apple Mac Os X Server	Version 10.5.4
Apple Mac Os X Server	Version 10.5.5
Apple Mac Os X Server	Version 10.5.6
Apple Mac Os X Server	Version 10.5.7
Apple Mac Os X Server	Version 10.5.8
Apple Mac Os X Server	Version 10.5
Apple Mac Os X Server	Version 10.6.0
Apple Mac Os X Server	Version 10.6.1
Apple Mac Os X Server	Version 10.6.2
Apple Mac Os X Server	Version 10.6.3
Microsoft Windows 7	All versions
Microsoft Windows Vista	All versions
Microsoft Windows Xp	All versions

Related CWEs

References (8)

http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html

Source: product-security@apple.com

PatchVendor Advisory

http://secunia.com/advisories/39135

Source: product-security@apple.com

Vendor Advisory

http://support.apple.com/kb/HT4105

Source: product-security@apple.com

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7427

Source: product-security@apple.com

http://lists.apple.com/archives/security-announce/2010//Mar/msg00003.html

Source: af854a3a-2127-422b-91ae-364da2661108

PatchVendor Advisory

http://secunia.com/advisories/39135

Source: af854a3a-2127-422b-91ae-364da2661108

Vendor Advisory

http://support.apple.com/kb/HT4105

Source: af854a3a-2127-422b-91ae-364da2661108

https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A7427

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.