Brief Hands-On Report--Apple Released iTunes 6.0.5

iTunes 6.0.5 is available for download via Software Update or from this Apple Web page. According to Apple,

iTunes 6.0.5 allows you to sync your Nike + iPod workout data to nikeplus.com, where you can easily track your progress, set training goals, challenge others, and much more. Visit the Nike Sport Music area on the iTunes Music Store to download workout mixes, Athlete Inspiration playlists, Nike podcasts, and more.

It also includes a security fix:

CVE-2006-1467 for Mac OS X v10.2.8 or later, Windows XP / 2000
Impact: An integer overflow in iTunes could cause a denial of
service or lead to the execution of arbitrary code
Description: The AAC file parsing code in iTunes versions prior
to 6.0.5 contains an integer overflow vulnerability. Parsing a
maliciously-crafted AAC file could cause iTunes to terminate or
potentially execute arbitrary code. iTunes 6.0.5 addresses this
issue by improving the validation checks used when loading AAC
files. Credit to ATmaCA working with TippingPoint and the Zero Day
Initiative for reporting this issue.

We downloaded and installed iTunes 6.0.5 on a number of Intel-based and PowerPC-based Macs with no problems. The iTunes Music Store now lists a new selection in the left column entitled Nike Sport Music which has songs, albums and playlists of songs related to sports and free sports-related podcasts and videocasts. [Bill Fox & Dana Baggett]

Saw something? Send a tip

The archive ran on reader tips. What did you see, where, and do you want the credit?

Read by the editor. Never published without your say.

More in Reviews · This month in the archive