A vulnerability has been reported in Apple iTunes, which can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error in various URI handlers including "itms", "itmss", "daap", "pcast", and "itpc" and can be exploited to cause a stack-based buffer overflow.

Successful exploitation allows execution of arbitrary code.

Solution
Update to version 8.2.

Provided and/or discovered by
* Rob King, TippingPoint DVLabs
* Will Drewry

Changelog
Further details available to Secunia VIM customers

Original Advisory
Apple:
http://support.apple.com/kb/HT3592

TippingPoint DVLabs:
http://dvlabs.tippingpoint.com/advisory/TPTI-09-03

Will Drewry:
http://redpig.dataspill.org/2009/05/drive-by-attack-for-itunes-811.html

Deep Links
Links available to Secunia VIM customers