Arbitrary code execution due to a buffer overflow as a result of opening a malicious media file.

Description:

Apple's iTunes media playing software has been updated to address a vulnerability that could crash the application or allow an attacker to run software of their choice on a victim's system when a malicious music file is opened.

Mitigation:

Update to iTunes version 7.4 at the earliest opportunity.

Updates:

http://www.apple.com/itunes/download/

Source:

http://docs.info.apple.com/article.html?artnum=61798

Exploits:

CVE-ID: CVE-2007-3752