{"uuid": "552a719c-dddf-48ef-93ce-f6a0f43127f2", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2009-0950", "type": "seen", "source": "https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/multi/browser/itms_overflow.rb", "content": "{\"aliases\": [], \"arch\": \"x86\", \"author\": [\"Will Drewry \"], \"autofilter_ports\": [], \"autofilter_services\": [], \"check\": false, \"default_credential\": false, \"description\": \"This modules exploits a stack-based buffer overflow in iTunes\\n          itms:// URL parsing.  It is accessible from the browser and\\n          in Safari, itms urls will be opened in iTunes automatically.\\n          Because iTunes is multithreaded, only vfork-based payloads should\\n          be used.\", \"disclosure_date\": \"2009-06-01\", \"fullname\": \"exploit/multi/browser/itms_overflow\", \"is_install_path\": true, \"mod_time\": \"2025-12-17 17:11:13 +0000\", \"name\": \"Apple OS X iTunes 8.1.1 ITMS Overflow\", \"needs_cleanup\": null, \"notes\": {\"Reliability\": [\"unknown-reliability\"], \"SideEffects\": [\"unknown-side-effects\"], \"Stability\": [\"unknown-stability\"]}, \"path\": \"/modules/exploits/multi/browser/itms_overflow.rb\", \"platform\": \"OSX\", \"post_auth\": false, \"rank\": 500, \"ref_name\": \"multi/browser/itms_overflow\", \"references\": [\"CVE-2009-0950\", \"OSVDB-54833\", \"URL-http://support.apple.com/kb/HT3592\", \"URL-http://redpig.dataspill.org/2009/05/drive-by-attack-for-itunes-811.html\"], \"rport\": null, \"session_types\": false, \"targets\": [\"OS X\"], \"type\": \"exploit\"}", "creation_timestamp": "2026-09-08T06:49:36.432179Z"}