Apple has included a fix for a remote code execution vulnerability for the OS X and Windows versions of its latest iTunes 7.4 release.
The software was unveiled on 5 September to support a new range of iPods and a ring-tone builder.

Software exposes users to remote code execution vulnerability
vnunet.com, 07 Sep 2007
Apple has included a fix for a remote code execution vulnerability for the OS X and Windows versions of its latest iTunes 7.4 release.
The software was unveiled on 5 September to support a new range of iPods and a ring-tone builder.
The vulnerability lies in the cover art display system used by iTunes. Cover art is displayed while a track is playing, but is also used to navigate music in the Cover Flow interface.
By creating a specially malformed file, an attacker could cause an application crash or execute arbitrary code.
Remote code execution flaws are considered to be the most serious type of vulnerability, because they can be used by attackers to install malware.
Apple credited David Thiel, a security researcher at iSec Partners, with discovering the vulnerability.
Security firm Secunia rated the flaw as 'highly critical', the second highest of its alert levels. Secunia and the US Computer Emergency Readiness Team recommended that users install the update as soon as possible.
ITunes has yet to fall victim to a major attack, but other Apple products have been targeted by malware authors.
Late last year a piece of malware spread through MySpace preying on users via a flaw in Apple's QuickTime software.
The infamous MPack exploit tool has also been known to target Quicktime vulnerabilities.
Upgrades range from new colours to video screens
Studio cuts new deal just days after dumping iTunes

Remote access - Three steps to getting connected
3.4 million UK professionals now work from home – is your company equipped?

Cost benefits of a global collaboration network
This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications
Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Join our live chat session on Thursday at 11am to...

Researchers from security firm FireEye have been able to effectively...
Do you agree?
Have your say on this article