Slashdot Mirror

← Back to Stories (view on slashdot.org)

Apple iTunes Hit With a New Critical Flaw

Posted by Zonk on from the watch-what-you-listen-to dept.

Jameson writes "Apple has released a new iTunes version to correct a security vulnerability reported by Mark Litchfield. FrSIRT and Secunia marked the flaw as "critical", because it can be exploited by malicious people to compromise a user's system via maliciously-crafted MPEG4 file. iTunes 4.8 addresses this issue by improving the validation checks used when loading MPEG4 files."

2 of 44 comments (clear)

  1. FrSIRT? by commodoresloat · · Score: 3, Funny

    Did they get the FrSIRT post in when they published this vulnerability?

  2. oh no by fulldecent · · Score: 4, Funny

    This is devastating! I need this fixed yesterday.

    --

    -- I was raised on the command line, bitch