You're viewing an article in iPO's historic archive vault. Here, we've preserved the comments and how the site looked along with the article. Use this link to view the article on our current site: iTunes Security Flaw [Updated]

News

iTunes Security Flaw [Updated]

Friday, November 18th, 2005 at 10:55 AM - by Staff

eEye Digital Security reported a security flaw in iTunes on Thursday, according to CNET News. The flaw, which can potentially effect Windows users, could allows hackers to launch arbitrary code remotely and take over a user's computer. Mac users are not effected by this security flaw.

This is unrelated to the security patch Apple released for the Windows version of iTunes earlier this week. That patch addressed a problem where the wrong helper application could be launched, potentially allowing a hacker to run a program on a remote computer.

Additional information is unavailable at this time since both Apple's and eEye's policies prohibit discussing details of security issues until a patch has been released.

[This article has been updated with additional information about which operating systems are effected - Editor]

8 comments from the community.

You can post your own below.

+ show options

Your current settings, click to change: Sort Oldest First, Show Guest Posts, Hide Community Stats

Al Swearengen said:

member since 10 May 2005 with 339 posts, unranked, send him a message or view his profile

Fri Nov 18, 2005 12:48 pm

I couldn't glean much from the link to eEye Digital Security, how does this exploit work?

Quote this post ↓

A guest said: (hide)

Fri Nov 18, 2005 2:53 pm

Yawn, there is no exploit.

Quote this post ↓

Tiger said:

member since 17 Jun 2003 with 1018 posts, unranked, send him a message or view his profile

Fri Nov 18, 2005 4:15 pm

Al,

Note it says "All Microsoft Operatins Systems" (yes, the typo is theirs)

There has been no release of information if this actually can affect a MacOS, probably because as of yet, they don't have a clue.

Quote this post ↓

Tiger said:

member since 17 Jun 2003 with 1018 posts, unranked, send him a message or view his profile

Fri Nov 18, 2005 4:21 pm

And they've since updated their story backtracking and saying they're still testing the Macintosh version. They've only found it so far on the Windows versions.

Quote this post ↓

DrShakagee said:

member since 14 Jun 2001 with 941 posts, TMO Forum Mod, send him a message or view his profile

Fri Nov 18, 2005 5:18 pm

I found MAJOR exploit too, all you have to do to fix it is give me $50. I am not going to say what the exploit does or is, because I care too much about Apple and wouldn't want to hurt their stock. So to fix the problem I found, send me $50 and it will be fixed right away, you really need to fix this problem asap it's a major security issue.

Along with fixing the MAJOR security problem for $50 I will throw in the Brooklyn Bridge to the first, and for the next 5 people that send me $50 I will give a 1/5th portion of my sea shell collection (the one I keep spread out through the worlds beaches). This is a great deal and it will fix your major security problems with iTunes, AOL or anything else you think might be causing harm to you, your computer or the world in general.

Quote this post ↓

gslusher said:

member since 13 Nov 2002 with 2088 posts, unranked, send him a message or view his profile

Fri Nov 18, 2005 11:00 pm

DrShakagee wrote:
I found MAJOR exploit too, all you have to do to fix it is give me $50. I am not going to say what the exploit does or is, because I care too much about Apple and wouldn't want to hurt their stock. So to fix the problem I found, send me $50 and it will be fixed right away, you really need to fix this problem asap it's a major security issue.

Along with fixing the MAJOR security problem for $50 I will throw in the Brooklyn Bridge to the first, and for the next 5 people that send me $50 I will give a 1/5th portion of my sea shell collection (the one I keep spread out through the worlds beaches). This is a great deal and it will fix your major security problems with iTunes, AOL or anything else you think might be causing harm to you, your computer or the world in general.

Wow! Is your middle name, "Symantec"?

Quote this post ↓

A guest said: (hide)

Sat Nov 19, 2005 3:18 am

Doc! I want to dens you $50, but I can't find your address!

I hope I am the first, cuz I really want that bridge!

How can I send you money to fix my security problems!???!

Quote this post ↓

A guest said: (hide)

Mon Nov 21, 2005 5:14 am

Guest wrote:
Doc! I want to dens you $50, but I can't find your address!

I hope I am the first, cuz I really want that bridge!

How can I send you money to fix my security problems!???!

You're kidding, right?

Please tell me no one is this stupid.

Quote this post ↓

Post Your Comments

  Remember Me

Not a member? Register now. You can post comments without logging in, but they'll show up as a "guest" post.


Please enter the word exactly as you see it in the image above. Registered users aren't prompted for this. Having trouble reading the image get a new one.