Slashdot Mirror

← Back to Stories (view on slashdot.org)

Apple iTunes Hit With a New Critical Flaw

Posted by Zonk on from the watch-what-you-listen-to dept.

Jameson writes "Apple has released a new iTunes version to correct a security vulnerability reported by Mark Litchfield. FrSIRT and Secunia marked the flaw as "critical", because it can be exploited by malicious people to compromise a user's system via maliciously-crafted MPEG4 file. iTunes 4.8 addresses this issue by improving the validation checks used when loading MPEG4 files."

3 of 44 comments (clear)

  1. FrSIRT? by commodoresloat · · Score: 3, Funny

    Did they get the FrSIRT post in when they published this vulnerability?

  2. oh no by fulldecent · · Score: 4, Funny

    This is devastating! I need this fixed yesterday.

    --

    -- I was raised on the command line, bitch

  3. The Difference Between Apple & Microsoft Patch by Cr0w+T.+Trollbot · · Score: 1, Funny
    Time between Apple vulnerability being found and patched: Measured with a stopwatch.

    Time between Microsoft vulnerability being found and patched: Measured by counting redwood tree rings.

    Alternately, we could measure Microsoft's patch time by the number of spam e-mails an unpatched zombie system sends out. "Wow, Microsoft patched that security hole after only 9,000,000 SoBigs! They're really improving!"

    Crow T. Trollbot