Proof-of-concept code contains no virus or Trojan payload
vnunet.com, 17 Jan 2005
Code that allows hackers to exploit a vulnerability in Apple's iTunes software has appeared over the weekend.
The code was posted on the Bugtraq mailing list by someone known only as 'Nemo', and acknowledges the help of three friends 'andrewg', 'mercy' and 'core'. The code is designed purely as a proof of concept and contains no virus or Trojan payload.
"Here is some code to exploit the vulnerability. It will generate a *.pls file which, when opened with iTunes 4.7, will bind a shell on port 4444," said 'Nemo' in the message.
Early versions of iTunes are vulnerable to hackers who can build malicious playlist files which crash the application. Code can then be inserted, either to spread a virus or allow the attacker to take control of the host PC.
The latest version, iTunes 4.7.1, is not affected by the vulnerability and can be downloaded from Apple's website here.
Firms updating products against image risk
Subscribers urged to upgrade software immediately
In part one of V3.co.uk's interview with Dirk Singer, he dicusses social media monitoring strategies
Remote access - Three steps to getting connected
3.4 million UK professionals now work from home – is your company equipped?
Cost benefits of a global collaboration network
This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications
Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.
Alcatel-Lucent's Neal Tilley talks about how enterprises and carriers can...
Former Information Commissioner speaks out on government databases and data...
Commission comes out fighting after criticism from Oracle and Washington
Do you agree?
Have your say on this article