A vulnerability has been reported in Apple iTunes, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error when processing the "covr" atom in media files. This can be exploited to cause a heap based buffer overflow via a specially crafted cover art embedded in a media file.

Successful exploitation may allow execution of arbitrary code.

The vulnerability is reported in versions prior to 7.4.

Solution
Update to version 7.4.
Further details available to Secunia VIM customers

Provided and/or discovered by
David Thiel, iSEC Partners

Changelog
Further details available to Secunia VIM customers

Original Advisory
Apple:
http://docs.info.apple.com/article.html?artnum=306404

iSEC Partners:
https://www.isecpartners.com/advisories/2007-005-itunes.txt

Deep Links
Links available to Secunia VIM customers