Apple released iTunes v8.1 as security update

Affected Version(s): prior to 8.1
Description:  A vulnerability was reported in Apple iTunes. A remote user can cause denial of service conditions on the target system.
A remote user can send a Digital Audio Access Protocol (DAAP) message containing a specially crafted Content-Length parameter value to cause the target iTunes application to enter an infinite loop.

Xiaopeng Zhang, Zhenhua Liu, and Junfeng Jia of Fortinet’s FortiGuard Global Security Research Team reported this vulnerability.
Impact:  A remote user can cause the target iTunes application to enter an infinite loop.
Solution:  The vendor has issued a fixed version (8.1), available at:
http://www.apple.com/itunes/download/
http://www.securitytracker.com/alerts/2009/Mar/1021842.html

CVE-ID: CVE-2009-0016
Available for: Windows XP or Vista
Impact: Sending a maliciously crafted DAAP message may lead to a denial of service
Description: An infinite loop exists in the handling of iTunes Digital Audio Access Protocol (DAAP) messages. Sending a message containing a maliciously crafted Content-Length parameter in the DAAP header may lead to a denial of service. This update addresses the issue by performing additional validation of DAAP messages. This issue does not affect Mac OS X systems. Credit to Xiaopeng Zhang, Zhenhua Liu, and Junfeng Jia of Fortinet’s FortiGuard Global Security Research Team for reporting this issue.

CVE-ID: CVE-2009-0143
Available for: Mac OS X v10.4.10 or later, Mac OS X Server v10.4.10 or later, Windows XP or Vista
Impact: Subscribing to a malicious podcast may lead to the disclosure of iTunes username and password
Description: A design issue exists in the iTunes podcast feature. A subscription to a malicious podcast may cause an authentication dialog to be presented to the user. This dialog may entice the user to send iTunes credentials to the podcast server. This update addresses the issue by clarifying the origin of the authentication request in the dialog. Credit to Simon Bellwood for reporting this issue.
http://support.apple.com/kb/HT3487

Leave a Reply