Apple plugs security hole in iTunes

Filed in: Security — May 11th, 2005

Apple Computer has patched a flaw in iTunes that could open the door to a remote attack on a person’s computer.

The fix was released as part of the company’s iTunes 4.8 update. Earlier versions of the music software have a vulnerability within MPEG-4 file parsing, Apple said in a security advisory. People who access a malicious MPEG-4 file could trigger a buffer overflow exploit, which could then allow an attacker to gain remote control of their computer without their knowledge or crash iTunes.