Flaw affects latest iTunes as well
Written by Shaun Nichols in San Francisco
vnunet.com, 19 Sep 2008
Security experts are warning of a new zero-day vulnerability affecting Apple's QuickTime and iTunes players.
Known as a boundary condition error, the flaw exists in the player's handling of header information for multimedia files. An attacker could place specially-crafted XML code within an audio or movie file and cause the application to crash.
Discovery of the flaw was credited to a researcher using the handle 'securfrog.' There have been no reports of the vulnerability being targeted in the wild.
One of the best French door fridges we've tested
A good-looking fridge with useful features like an auto-filling water pitcher and a temperature-adjustable "FlexZone" drawer. It was a near-flawless performer in our cooling tests.