Description
Untrusted search path vulnerability in Apple iTunes before 9.1, when running on Windows 7, Vista, and XP, allows local users and possibly remote attackers to gain privileges via a Trojan horse DLL in the current working directory.
References
- itunes-dll-code-execution(61223) vdb-entry
- http://support.apple.com/kb/HT4105
- oval:org.mitre.oval:def:7217 vdb-entry signature
- 42541 vdb-entry
- http://www.acrossecurity.com/aspr/ASPR-2010-08-18-1-PUB.txt
- 20100818 ACROS Security: Remote Binary Planting in Apple iTunes for Windows (ASPR #2010-08-18-1) mailing-list