iTunes Buffer Overflow

Since Apple released iTunes for Windows, I know of a lot Winamp , Musicmatch users out there who migrated to the world of iTunes !

Here is something , you should take note ! For those who aren't running iTunes version 4.8, beware.

Apple has updated iTunes to version 4.8, due to a MPEG-4 file parsing buffer overflow vulnerability !

This vulnerability is caused due to a boundary error within the MPEG-4 file parsing and can be exploited to cause a buffer overflow thru a specially crafted MPEG-4 file.

So, all you iTunes users out there, don't wait... Upgrade to the new version which was officially release on May 9th 2005.

Apple - Support - Downloads - iTunes 4.8