14 DAY TRIAL // Upon posting iTunes 8.2 yesterday, Apple issued a note detailing some of the hidden stuff inside the respective software update. On one hand, the company directly discloses that iTunes 8.2 adds compatibility with iPhone OS 3.0, a move that confirms that iPhone and iPod touch owners are getting the new software soon. On the other hand, iTunes 8.2 also addresses a security issue on both Mac and Windows.
Available only in Tiger (Client and Server) on Mac computers, as well as for Windows Vista, XP SP2 or later on PC, the bug triggers unexpected application termination or arbitrary code execution by visiting a maliciously crafted website, Apple says.
The company describes the vulnerability explaining that “a stack buffer overflow exists in iTunes when parsing 'itms:' URLs. Accessing a maliciously crafted 'itms:' URL may lead to an unexpected application termination or arbitrary code execution.” Crediting Will Drewry for reporting this issue, the iTunes 8.2 software update addresses the issue through improved bounds checking, Apple reveals.
Posted June 1, 2009, iTunes Version 8.2 weighs in at 72.MB and requires Mac OS X 10.4.10 or later and Mac OS X 10.5 or later. Supported languages include Deutsch, English, Français, Español, Italiano, Nederlands, Dansk, Norsk Bokmål, Polski, Português, Português Brasileiro, Pусский, Suomi, Svensk, Chinese, Japanese and Korean.
In related news, Apple has updated not only iTunes, but also its QuickTime Player and GarageBand music application, part of the iLife suite. The latter has been updated with the usual improvements to stability and compatibility. However, the QuickTime 7.6.2 update for Mac and Windows addresses close to a dozen security flaws, two of which are Windows-bound. A more detailed piece on the update will be available shortly.
Download iTunes 8.2 for Mac (Free)
Download iTunes 8.2 for Windows-32 Bit (Free)
Download iTunes 8.2 for Windows-64 Bit (Free)