Lists

Terms and Conditions
Lists hosted on this site
Email the Postmaster
Tips for posting to public mailing lists

APPLE-SA-2009-09-22-1 iTunes 9.0.1

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

APPLE-SA-2009-09-22-1 iTunes 9.0.1

Subject: APPLE-SA-2009-09-22-1 iTunes 9.0.1
From: Apple Product Security <email@hidden>
Date: Tue, 22 Sep 2009 15:16:13 -0700

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

APPLE-SA-2009-09-22-1 iTunes 9.0.1

iTunes 9.0.1 is now available and addresses the following:

iTunes
CVE-ID:  CVE-2009-2817
Available for:  Mac OS X v10.4.11 or later,
Mac OS X Server v10.4.11 or later, Windows XP, Vista, Windows 7
Impact:  Opening a maliciously crafted .pls file may lead to an
unexpected application termination or arbitrary code execution
Description:  A buffer overflow exists in the handling of .pls files.
Opening a maliciously crafted .pls file may lead to an unexpected
application termination or arbitrary code execution. This update
addresses the issue through improved bounds checking. Credit to Roger
Hart of IP3, and Steven Woolley at Oogli LLC for reporting this
issue.


iTunes 9.0.1 may be obtained from:
http://www.apple.com/itunes/download/

For Mac OS X:
The download file is named: "iTunes9.0.1.dmg"
Its SHA-1 digest is: eea9dbc34e395a44bfa821501827ea3c5b4c24a9

For Windows XP / Vista / Windows 7:
The download file is named: "iTunesSetup.exe"
Its SHA-1 digest is: 25d04ff5a63a808ca56875cdf9a9474b9b845f1d

For 64-bit Windows XP / Vista / Windows 7:
The download file is named: "iTunes64Setup.exe"
Its SHA-1 digest is: 85f8c516cb45024292cde1f48e88fd392e25626f

Information will also be posted to the Apple Security Updates
web site: http://support.apple.com/kb/HT1222

This message is signed with Apple's Product Security PGP key,
and details are available at:
https://www.apple.com/support/security/pgp/

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.9 (Darwin)

iQEcBAEBAgAGBQJKuTw7AAoJEHkodeiKZIkBDj8H/RLVXG4pWYrQE71D4+lGmTLq
oCN/uxIaH2b+xG6FkuTa21DYg6UocPY7umJLXzp9GnN1LPsxjLFwRcjkoB8mGf8S
5ggY8GeJZYuP8+4vjcho/+spnUsdvFNPn6NDDsBg+dUCSlGSSUm/cOrkhBO7n5xx
t+3vVMRlw16qtbr4uNh7jg27Onkogxyf2LBcMIMTJztwtWfXi3gM9StkK3JnwSrN
9+ClSrJifjcfPTo1y3ag0kD85ujmgR1K8MpUjSbSIED8Lhsjm/Q6YDvL4SErLxhq
e8jRVgW0rKta5MPPWgnlfN3i/UM7dP/F0vbf5P5BrHZoyUKWMu4zkxlGz0RalHs=
=HlzW
-----END PGP SIGNATURE-----
_______________________________________________
Do not post admin requests to the list. They will be ignored.
Security-announce mailing list      (email@hidden)
Help/Unsubscribe/Update your Subscription:
This email sent to email@hidden



Prev by Date:
APPLE-SA-2009-09-14-1 Xsan 2.2

Previous by thread:
APPLE-SA-2009-09-14-1 Xsan 2.2

Index(es):

Date
Thread