Security researchers have discovered four critical vulnerabilities involving Apple's QuickTime media player software and the download application for Apple's iTunes music store. The flaws create a means for hackers to take control of affected systems, according to eEye Digital Security, the firm that discovered the bugs.

All four security issues are exploitable via iTunes. Because of the popularity of Apple's iPod among office workers many businesses, as well as consumers, are potentially exposed to attack. The cross platform flaw affects Windows 2000, Windows XP and Apple Mac OS X systems running vulnerable versions of iTunes. Fortunately Apple has released a fix. Users are urged to update to QuickTime 7.0.4. More info on the flaws can be found in a series of advisories by eEye Digital Security (here, here, here, here). ®

Related stories

• Apple QuickTime update lances multiple bugs (6 March 2007)
• Unpatched bug bites QuickTime (3 January 2007)
• Apple update fixes 'critical' security bug (2 March 2006)
• Mac OS X malware latches onto Bluetooth vulnerability (17 February 2006)
• Apple adds MiniStore monitor warning to iTunes (19 January 2006)
• MS ends Mac media player development (13 January 2006)
• Apple downplays iTunes 'spyware' fears (12 January 2006)
• MS to ship Mac Office of five years 'minimum' (12 January 2006)
• Sony 'rootkit' settlement clamps down on DRM (29 December 2005)
• Shared music abuse bug hits iTunes (17 October 2005)
• Letters Are you scared of iPods, penguins, terrorists or Daleks? (6 September 2005)
• Motorola-built iPod Phone next week? Not worth looking at, say pundits (3 September 2005)
• Hackers look outside Windows for flaws (28 July 2005)