Apple Fixes Nearly 60 Bugs With iTunes 10.2 Release

[Jack]

Apple has released a new version of its ubiquitous iTunes software that includes fixes for nearly 60 vulnerabilities, including several bugs that could be used to run remote code on vulnerable machines.

Most of the vulnerabilities that Apple fixed with the release of iTunes 10.2 lie in the open source WebKit layout engine that underpins iTunes. Many of the vulnerabilities can be used by attackers to either crash iTunes or execute arbitrary code on the PC. Apple recommends that users download the new version immediately.

"Multiple memory corruption issues exist in WebKit. A man-in-the-middle attack while browsing the iTunes Store via iTunes may lead to an unexpected application termination or arbitrary code execution," Apple said in its advisory.

More details - link

 

[AyeAyeCaptain]

That's one handy thing about having Secunia PSI 2.0, so the programs we don't use or forget to update are done so either auto, or semi auto, or prompt install solution after scan. Hardly use Itunes to be honest, but keep it on my system/s anyway.