From Apple's email notification:
iTunes 10.6.3 is now available and addresses the following:
iTunes
Available for: *Mac OS X v10.5 or later, Windows 7, Vista,
XP SP2 or later
Impact: *Importing a maliciously crafted .m3u playlist may lead to an
unexpected application termination or arbitrary code execution
Description: *A heap buffer overflow existed in the handling of .m3u
playlists.
CVE-ID
CVE-2012-0677 : Gjoko Krstic of Zero Science Lab
WebKit
Available for: *Windows 7, Vista, XP SP2 or later
Impact: *Visiting a maliciously crafted website may lead to an
unexpected application termination or arbitrary code execution
Description: *A memory corruption issue existed in WebKit.
CVE-ID
CVE-2012-0672 : Adam Barth and Abhishek Arya of the Google Chrome
Security Team
--
Tea Party Patriots is to Patriotism as
People's Democratic Republic is to Democracy.
|