Home » Hacking News » Apple fixes critical iTunes code bug
Apple fixes critical iTunes code bug
by Nikola Strahija on May 12th, 2005 A bug in code used by iTunes 4.X to parse MPEG-4 files was discovered last week, it allows maliciously-crafted media files to crash vulnerable versions of the application.
In the process, hostile code can be injected into vulnerable systems. iTunes users are advised to update to version 4.8, which features improved validation checks, to guard against possible exploitation.
Danish security reporting firm Secunia rates the iTunes bug as "highly critical". Exploitations of both Mac OS and Windows machines running iTunes is possible - providing an attacker tricks a user into opening a malicious MPEG-4 file with a vulnerable version of iTunes.
