← Database

CVE-2007-3752

CRITICAL CVSS: 9.3 Published: 2007-09-06 Modified: 2026-06-16

Description

Heap-based buffer overflow in Apple iTunes before 7.4 allows remote attackers to cause a denial of service (application crash) or execute arbitrary code via crafted album cover art in the covr atom of an MP4/AAC file.

Affected Platforms

Apple Itunes

Weakness Type

CWE-119

References