Apple fixes flaw with iTunes update
Summary
New software addresses a vulnerability that allowed previous versions to crash and execute arbitrary code.
Topics
Apple on Tuesday released an update of its iTunes software to address a vulnerability that could cause earlier versions to crash and execute arbitrary code.
With previous versions, the flaw could allow an attacker to inject more data into a particular memory location than the program could accommodate, thereby allowing the attacker to take over a computer. The new software, iTunes 4.7.1, is available at Apple's Web site.
The update is available for Mac OS X, Microsoft Windows XP and Microsoft Windows 2000.
Apple has faced fewer security issues than Microsoft, with its prevalent Windows operating system. Still, Apple has garnered some attention from hackers.
Last August, a Norwegian hacker published the Apple AirPort Express public key, which Apple uses for encrypting music transmitted from iTunes to wireless base stations.
Talkback - Tell Us What You Think
The best of ZDNet, delivered
ZDNet Newsletters
Get the best of ZDNet delivered straight to your inbox
Facebook Activity
