Sep

6

iTunes 7.4 Released - Minor Install Snags Included

September 6, 2007 |

Some people have been waiting quite impatiently for the release of iTunes 7.4, which adds support for the new line-up of iPods released yesterday.

I just went ahead and installed it. However, on my Vista machine, the installer complained about the fact that the Windows Explorer was running. I had to go into the task manager, kill the process (which kills the window managements as well), finish the install and then start up the Explorer again.

Maybe I am the only one this happened to?

Otherwise, I don’t see any real changes to the application itself.

However, according to this document on the Apple website, Apple also patched a serious security hole:

Opening a maliciously crafted music file may lead to an unexpected application termination or arbitrary code execution

Description: A buffer overflow exists in iTunes when processing album cover art. By enticing a user to open a maliciously crafted music file, an attacker may trigger the overflow which may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue by performing proper bounds checking. Credit to David Thiel of iSEC Partners for reporting this issue.

Update: Ryan Naraine reports on the security patch here and chastises Apple for not being more open about this.

Technorati tags:

Share This

Related Posts

Comments