GCVE - cpe:2.3:a:apple:itunes:6.0.4.2:*:windows:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:apple:itunes:6.0.4.2:*:windows:*:*:*:*:*

part: a version: 6.0.4.2 update: *

Vendor	Apple (`c2b419d0-9f0f-51c1-88dc-2e204a98e1c7`)
Product	Itunes (`070f0504-eb09-503b-89ba-8a3202d30355`)
Edition	windows
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2009-2817`	vulnerable	2026-06-08 04:51:30.618290	Details available Buffer overflow in Apple iTunes before 9.0.1 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted .pls file. Published: 2009-09-24T18:00:00.000Z Updated: 2024-08-07T06:07:36.383Z Open on db.gcve.eu Reference links https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6290 http://lists.apple.com/archives/security-announce/2009/Sep/msg00006.html http://support.apple.com/kb/HT3884 http://www.securityfocus.com/bid/36478	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0950`	vulnerable	2026-06-08 04:51:12.488923	Details available Stack-based buffer overflow in Apple iTunes before 8.2 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via an itms: URL with a long URL component after a colon. Published: 2009-06-02T18:00:00.000Z Updated: 2024-08-07T04:57:17.367Z Open on db.gcve.eu Reference links http://www.vupen.com/english/advisories/2009/1470 http://www.securityfocus.com/bid/35157 http://secunia.com/advisories/35314 https://www.exploit-db.com/exploits/8934 http://redpig.dataspill.org/2009/05/drive-by-attack-for-itunes-811.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2009-0016`	vulnerable	2026-06-08 04:51:06.882584	Details available Apple iTunes before 8.1 on Windows allows remote attackers to cause a denial of service (infinite loop) via a Digital Audio Access Protocol (DAAP) message with a crafted Content-Length header. Published: 2009-03-14T18:00:00.000Z Updated: 2024-08-07T04:17:10.429Z Open on db.gcve.eu Reference links http://securitytracker.com/id?1021842 http://www.securityfocus.com/archive/1/501758/100/0/threaded http://osvdb.org/52578 http://www.securityfocus.com/bid/34094 http://www.fortiguardcenter.com/advisory/FGA-2009-11.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2008-3636`	vulnerable	2026-06-08 04:50:35.744542	Details available Integer overflow in the IopfCompleteRequest API in the kernel in Microsoft Windows 2000, XP, Server 2003, and Vista allows context-dependent attackers to gain privileges. NOTE: this issue was originally reported for GEARAspiWDM.sys 2.0.7.5 in Gear Software CD DVD Filter driver before 4.001.7, as used in other products including Apple iTunes and multiple Symantec and Norton products, which allows local users to gain privileges via repeated IoAttachDevice IOCTL calls to \\.\GEARAspiWDMDevice in this GEARAspiWDM.sys. However, the root cause is the integer overflow in the API call itself. Published: 2008-09-10T16:00:00.000Z Updated: 2024-08-07T09:45:18.949Z Open on db.gcve.eu Reference links http://www.securitytracker.com/id?1020999 http://lists.apple.com/archives/security-announce//2008/Sep/msg00001.html http://www.symantec.com/avcenter/security/Content/2008.10.07a.html http://www.vupen.com/english/advisories/2008/2770 http://www.vupen.com/english/advisories/2008/2526	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.