Description
Unquoted Windows search path vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows might allow local users to gain privileges via a malicious C:\program.exe file.
References
- ADV-2005-2443 vdb-entry
- 20051115 Multiple Vendor Insecure Call to CreateProcess() Vulnerability third-party-advisory
- 1015222 vdb-entry