Calling the warning's severity "high," eEye warned last week that a flaw exists in the popular music downloading program that could allow malicious code to compromise it.
"A remotely exploitable flaw exists that allows arbitrary code to be executed in the context of the logged-in user," the security firm warned on its website. The vulnerability exists on all Microsoft operating systems.
Earlier last week, Apple had released an advisory that a malicious user could compromise PCs through iTunes 5 and said the vulnerability had been addressed in later versions of the program.
"Due to the way iTunes 5 for Windows launches its helper application, multiple system paths are searched to determine which program to run," Apple warned on its iTunes site. "This may allow a malicious user on the local system to create an environment where an alternate program will be executed by iTunes. This has already been addressed in the iTunes 6 release for Windows."
.jpg&h=140&w=231&c=1&s=0)
How Monash University is tackling the AI-driven app security gap
Meta scraps AI image feature days after launch
.jpg&h=140&w=231&c=1&s=0)
.jpg&h=140&w=231&c=1&s=0)
.png&w=100&c=1&s=0)
iTnews State of Data & AI Breakfast
Forrester's AI Forum Sydney
The 2026 iAwards
.jpg&w=120&c=1&s=0)
Integrate 2026
Security Exhibition & Conference
_(1).jpg&h=140&w=231&c=1&s=0)
