CVE-2005-0043

Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.

• http://lists.apple.com/archives/security-announce/2005/Jan/msg00000.htmlPatch
• http://secunia.com/advisories/13804
• http://securitytracker.com/id?1012839
• http://www.idefense.com/application/poi/display?id=180&type=vulnerabilitiesExploit, Patch
• http://www.kb.cert.org/vuls/id/377368Patch, Third Party Advisory, US Government Resource
• http://www.osvdb.org/12833
• http://www.securityfocus.com/bid/12238
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18851
• http://lists.apple.com/archives/security-announce/2005/Jan/msg00000.htmlPatch
• http://secunia.com/advisories/13804
• http://securitytracker.com/id?1012839
• http://www.idefense.com/application/poi/display?id=180&type=vulnerabilitiesExploit, Patch
• http://www.kb.cert.org/vuls/id/377368Patch, Third Party Advisory, US Government Resource
• http://www.osvdb.org/12833
• http://www.securityfocus.com/bid/12238
• https://exchange.xforce.ibmcloud.com/vulnerabilities/18851

Published

May 2, 2005

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2005-0035The Acrobat web control in Adobe Acrobat and Acrobat Reader …
• CVE-2005-0036The DNS implementation in DeleGate 8.10.2 and earlier allows…
• CVE-2005-0037The DNS implementation of DNRD before 2.10 allows remote att…
• CVE-2005-0038The DNS implementation of PowerDNS 2.9.16 and earlier allows…
• CVE-2005-0039Certain configurations of IPsec, when using Encapsulating Se…
• CVE-2005-0040Multiple cross-site scripting (XSS) vulnerabilities in DotNe…
• CVE-2005-0044The OLE component in Windows 98, 2000, XP, and Server 2003, …
• CVE-2005-0045The Server Message Block (SMB) implementation for Windows NT…
• CVE-2005-0047Windows 2000, XP, and Server 2003 does not properly "validat…
• CVE-2005-0048Microsoft Windows XP SP2 and earlier, 2000 SP3 and SP4, Serv…
• CVE-2005-0049Windows SharePoint Services and SharePoint Team Services for…
• CVE-2005-0050The License Logging service for Windows NT Server, Windows 2…