Apple iTunes vulnerability on Windows
eEye has discovered a remotely expoitable security vulnerability in Apple’s iTunes software. It affects iTunes 6 and prior and the current security updates (released yesterday) do not address the issue. News.com has coverage as well. Earlier they reported that it affected “all operating systems”, however now they are saying that it’s only been found on Windows systems using iTunes.
The flaw enables malicious hackers to launch arbitrary code remotely, once a user clicks on a malicious Web site link or opens a malicious e-mail, Manzuik said.
eEye will not disclose details on the vulnerability until there is a patch available for the problem.
Popularity: 1% [?]
Related Posts - Spyware news and musings It's funny, in the last couple days 180solutions had a blog post that was somewhat... what's the term I'm looking for ? well they were quite defensive and concerned about "anti-spyware zealots" about "Scanning companies" and trying to work with them to explain their business model. Of course, legal action......
- The biggest computer security vulnerability ever I talk quite a bit about computer viruses and computer security on this site. It's probably one of the bigger problems that I grapple with for my customers. Today I'm going to talk about the biggest computer security vulnerability there is. In fact, this is a general security vulnerability. It......
- Firefox zero-day vulnerability (or is it?) I saw a comment somewhere else that zero-day was overused and in essense ANY previously unknown vulnerability in open source software is technically zero day... the intent here though is to use the word in this context.... "vulnerability has been released without giving the vendor an opportunity to patch..." Yes,......
Related Websites - Microsoft Warns of SQL Attack SQL stands for Structured Query Language. SQL Attack is kind of Hacking attack. Just days after patching a critical flaw in its Internet Explorer browser, Microsoft is now warning users of a serious bug in its SQL Server database software. Microsoft issued a security advisory late Monday, saying that the......
- Window Update Breaks Zone Alarm "In This Corner, Window Update!" Flaming your firewall Today after automatically downloading and installing a Windows networking update, KB951748, thousands of XP users found they no longer had access to the internet. Zone Alarm, a popular 3rd party firewall, interpreting the update as an attack declared internet access denied. So......
- Microsoft to Improve User Access Control in Windows 7 I was just reading a Slashdot article about Microsoft improving User Access Control (UAC) in Windows 7. In the cited PC Pro article, Microsoft engineer Ben Fathi says: We've heard loud and clear that you are frustrated. You find the prompts too frequent, annoying, and confusing. We still want to......
Similar Posts
- Another update on the 0day Explorer exploit
- Quicktime and iTunes vulnerabilities
- Another McAfee security product flaw
- Other MS patch news as well as a Yahoo vulnerability?
- Multiple Apple updates as Mac goes to version 10.4.8