CVE-2007-1008

CVE-2007-1008 describes a denial-of-service vulnerability in Apple iTunes 7.0.2. An attacker could exploit this by providing a crafted XML list of radio stations, leading to memory corruption and an application crash. This attack requires user assistance and a man-in-the-middle or DNS spoofing attack to deliver the malicious XML. The vulnerability has a low CVSS score of 2.6, indicating a network attack vector with high complexity and only a partial impact on availability. While an ExploitDB entry exists, there is no evidence of active exploitation, Metasploit or Nuclei modules, or significant community discussion or media coverage.