iTunes as Hacker Tool

If you follow some of the links further throughout the article you will reach this page which sums it up well, and basically what Christopher said. http://www.securityfocus.com/archive/1/387080/2005-01-10/2005-01-16/0

The iTunes vulnerability is only in versions prior to 4.7.1. Most people will have the newest version via Software Update so this isn't that big of an issue (there are exceptions). Basically, a playlist file (.m3u or .pls) that contains a URL over 3045 bytes long causes a buffer overflow that then allows the attacker to execute arbitrary code on your computer. Solution: Make sure you are running iTunes 4.7.1.

I admit, I didn't understand that article. It drops the iTunes names, then doesn't mention it again except for a half-sentence. Are they referring to pyMystique (or whatever it's called) because that wasn't malicious and to portray it along with the others is just wrong. Seems to me, that article (crappy in it's own right) just dropped the iTunes name to get people to read. There was absolutely no substance.

Meh. The Reuters article also fails to give any detail about iTunes hacking so it might just be hype that some writer pulled from his butt.