CVE-2005-2938

Description

Unquoted Windows search path vulnerability in iTunesHelper.exe in iTunes 4.7.1.30 and iTunes 5 for Windows might allow local users to gain privileges via a malicious C:\program.exe file.

Affected products

• Apple / itunes4.7.1.30 – 4.7.1.30
• Apple / itunes5.0 – 5.0

References

• VENDOR_ADVISORYhttp://www.vupen.com/english/advisories/2005/2443
• MISChttp://www.idefense.com/application/poi/display?id=340&type=vulnerabilities
• MISChttp://securitytracker.com/id?1015222