ITSS-Advisory : Medium : Apple : iTunes

THREAT LEVEL
============
Medium

INFORMATION
===========
Product: iTunes
Publisher: Apple
Impact/Access: Execute Arbitrary Code/Commands -- Remote with User Interaction
Denial of Service -- Remote with User Interaction
Resolution: Patch/Upgrade
CVE Names: CVE-2009-2817

AFFECTED PLATFORMS
==================
Operating System: Mac OS X
Windows

IMPACT
======
iTunes 9.0.1 is now available and addresses the following:

iTunes
CVE-ID: CVE-2009-2817
Available for: Mac OS X v10.4.11 or later, Mac OS X Server v10.4.11 or later, Windows XP, Vista, Windows 7
Impact: Opening a maliciously crafted .pls file may lead to an unexpected application termination or arbitrary code execution
Description: A buffer overflow exists in the handling of .pls files.
Opening a maliciously crafted .pls file may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue through improved bounds checking. Credit to Roger Hart of IP3, and Steven Woolley at Oogli LLC for reporting this issue.

MITIGATION
==========
iTunes 9.0.1 may be obtained from:
http://www.apple.com/itunes/download/

For Mac OS X:
The download file is named: "iTunes9.0.1.dmg"
Its SHA-1 digest is: eea9dbc34e395a44bfa821501827ea3c5b4c24a9

For Windows XP / Vista / Windows 7:
The download file is named: "iTunesSetup.exe"
Its SHA-1 digest is: 25d04ff5a63a808ca56875cdf9a9474b9b845f1d

For 64-bit Windows XP / Vista / Windows 7:
The download file is named: "iTunes64Setup.exe"
Its SHA-1 digest is: 85f8c516cb45024292cde1f48e88fd392e25626f

REFERENCES
=========
Information will also be posted to the Apple Security Updates web site:
http://support.apple.com/kb/HT1222