Apple’s iTunes 8.1 plugs malicious podcast security hole

on Thursday released , which includes a fix for a vulnerability that could lead to theft of usernames and passwords if a podcast containing malware were subscribed to.

The software update addresses a design issue in the iTunes podcast feature that made it possible for a subscription to a malicious podcast to cause an authentication dialog to be displayed that could prompt the user for log-in credentials to the podcast server, ’s advisory said.

The issue affects Mac OS X v 10.4.10 and later. The issue was reported by Simon Bellwood.

also fixes a vulnerability that could allow maliciously crafted Digital Audio Access Protocol messages to cause a denial of service on computers running Windows XP or Vista. Fortinet’s Fortiguard Global Security Research team is credited with discovering this bug.

Thanks for sourse http://news.cnet.com/8301-1009_3-10195204-83.html?part=rss&subj=news&tag=2547-1009_3-0-20

More information about computer go to

computer

Related Posts(Article)

Tags: , ,

Leave a Reply