$ cve CVE-2005-0043 JSON

CVE-2005-0043 EXPLOIT

7.5

HIGH · CVSS 2.0 · EPSS 69% (pctl 99)

Patch early

A public exploit exists.

Buffer overflow in Apple iTunes 4.7 allows remote attackers to execute arbitrary code via a long URL in (1) .m3u or (2) .pls playlist files.

CVSS	7.5 (HIGH, v2.0)
Vector	AV:N/AC:L/Au:N/C:P/I:P/A:P
EPSS	69.01% — more likely to be exploited than 99% of all CVEs
On CISA KEV	no
Public exploit	yes
Published	2005-05-02
Last modified	2026-06-16

Vendor	Product
apple	itunes

Source	Title	Date
exploit-db	Apple iTunes 4.7 - Playlist Buffer Overflow (Metasploit)	2010-05-09
exploit-db	Apple iTunes - Playlist Parsing Local Buffer Overflow	2005-01-16