iTunes update patches bug; adds new iPod, iPhone features
Version 7.4 fixes critical flaw, readies iPhone for ringtones and Wi-Fi downloads
Computerworld - Apple Inc. updated its iTunes music software late yesterday to patch a critical vulnerability and add features that will only be enabled once the new iPod touch rolls out later this month.
According to the advisory released Wednesday, iTunes 7.4 fixes a flaw that could result in "arbitrary code execution," Apple's phrase for a critical bug. The vulnerability, which is within the code that processes and displays album cover art, could be exploited by attackers using a malformed music file.
"An attacker may trigger the overflow, which may lead to an unexpected application termination or arbitrary code execution," the advisory read. Apple credited the bug find to David Thiel of iSEC Partners Inc. A researcher at iSEC, Thiel was a presenter at the August Black Hat security conference on vulnerabilities within media software (download PDF), and mentioned iTunes in passing during his Las Vegas presentation.
Both the Mac OS X and Windows versions of iTunes are flawed and must be updated to 7.4, Apple said.
The updated iTunes also includes several features Apple CEO Steve Jobs touted yesterday during the launch event for a revamped iPod line. Among the iTunes 7.4 additions: the ability to download tracks from iTunes over a Wi-Fi connection, free wireless access to iTunes from Starbucks coffee shops -- and ringtones. All three will be enabled sometime this month in an iPhone update, while the first two will be available in the iPod touch when it debuts later in September.
None, however, are as yet working. Apple, for instance, must first designate the half-million tracks that Jobs said would be eligible as ringtones for the iPhone. The free access at Starbucks won't kick in until the coffee chain makes changes on its end with its hot spot provider, T-Mobile. The Seattle-based company will debut the service Oct. 2 in 600 of its stores in New York and its hometown, then roll it out to another 350 stores in San Francisco in early November.
Users can update to Version 7.4 using Software Update on the Mac or the optional Apple Software Update utility on Windows PCs. Alternately, the application can be downloaded from Apple's site.
Read more about Mac OS X in Computerworld's Mac OS X Topic Center.
- Path Selection Infographic Path Selection Infographic
- Hyperconvergence Infographic A wide range of observers agree that data centers are now entering an era of "hyperconvergence" that will raise network traffic levels faster...
- Preparing Your Infrastructure for the Hyperconvergence Era From cloud computing and virtualization to mobility and unified communications, an array of innovative technologies is transforming today's data centers.
- How WAN Optimization Helps Enterprises Reduce Costs If you wanted to break down innovation into a tidy equation, it might go something like this: Technology + Connectivity = Productivity. Productivity...
- Cloud Knowledge Vault Learn how your organization can benefit from the scalability, flexibility, and performance that the cloud offers through the short videos and other resources...
- LIVE EVENT: 5/7, The End of Data Protection As We Know It. Introducing a Next Generation Data Protection Architecture. Traditional backup is going away, but where does this leave end-users? All Mac OS X White Papers | Webcasts