CVE-2005-1248: Apple iTunes

High severity, CVSS 7.5. EPSS: 5.4% chance of exploitation in the next 30 days.

Buffer overflow in Apple iTunes before 4.8 allows remote attackers to execute arbitrary code via a crafted MPEG4 file.

Affected products

• Apple iTunes: version 4.2.72 only; version 4.5 only; version 4.6 only; version 4.7 only; version 4.7.1 only

Published 2005-05-16. Last modified 2026-06-16.