Users of Apple's iTunes software need to upgrade immediately to avoid their computers being compromised, security experts have warned.
Hackers can build malicious playlist files which they can use to crash the application and seize control of the computer by inserting Trojan code, according to security firm iDefence. The rogue playlists can be identified by their unusually long URLs.
"The problem specifically exists when parsing playlist files that contain long URL file entries," warned iDefence in an advisory this morning.
"Malicious playlist files can come with either the .m3u or .pls extension. Although their formats are different, the vulnerability in each is the same."
The company advises users to upgrade to iTunes 4.7.1, which fixes the problem, and to avoid downloading playlists from unknown sources.
Software Test Engineer 6 Weeks Contract £ 35 per hour Wiltshire We have an urgent need for a Software Test Engineer. Main Duties: ·Sound understanding of full software lifecycle ·Solid experience in requirements analysis ·Requirements ... more >
Software Test Engineer 3 Months Contract £35 per hour Wiltshire We have an urgent need for a Software Test Engineer. Main Duties: ·Sound understanding of full software lifecycle ·Solid experience in requirements analysis ·Requirements based ... more >
Major Investment Bank requires a Business Analyst to work within reference data IT. The reference data IT function is responsible for the three internal systems. One of the systems is a strategic repository for Client ... more >
Job Ref: CY - 27021979 Package: £25 – 42,000 +Bens Location: YORKSHIRE Job type: Occupational Health Position type: Permanent Hours: Full time Contact name: Mr Colin Youle Contact Company: JAM HUMAN RESOURCES Are you a ... more >More job opportunities
Print
Discuss
Send to friend
RSS feeds
Proof-of-concept code contains no virus or Trojan payload 17 Jan 2005
del.icio.us
Digg this
reddit!
