Brief Hands-On Report--Apple released iTunes 7.4 with Security Fix, New Functionality and It removes Third-Party Ringtones from iPhone
With iTunes 7.4, sync your favorite music and more with the new iPod nano (third generation), iPod classic, and iPod touch, plus create custom ringtones exclusively for iPhone with many of your favorite songs purchased from the iTunes Store. You can now also play purchased videos with closed captioning (when available), easily rate your favorite albums from one to five stars, and watch videos at a larger size inside the iTunes window.
iTunes 7.4 also includes a security update. Here are the details:
CVE-2007-3752--Opening a maliciously crafted music file may lead to an unexpected application termination or arbitrary code execution. A buffer overflow exists in iTunes when processing album cover art. By enticing a user to open a maliciously crafted music file, an attacker may trigger the overflow which may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue by performing proper bounds checking. Credit to David Thiel of iSEC Partners for reporting this issue.
We downloaded and successfully installed iTunes 7.4 via Software Update on a variety of Macs, including: Mac mini Core Duo, aluminum iMac Core 2 Duo, white iMac Core 2 Duo, MacBook Pro Core 2 Duo (LED), Power Mac G4 Cube and PowerBook G4. When launched, iTunes 7.4 updated our iTunes libraries after dismissing the license agreement.
We used iTunes 7.4 extensively with several Macs and encountered no problems. Unfortunately, none of the new music tools (direct iPhone song purchase, Starbucks song purchase and ringtones) announced Wednesday work yet.
More unfortunately, however, if you use iTunes 7.4 to sync your iPhone, it will delete the ringtones installed by third-party applications like iToner 1.0.0 that we favorably reviewed last week. Hopefully, Ambrosia Software will come up with a fix real soon. [Bill Fox & Dana Baggett]
Saw something? Send a tip
The archive ran on reader tips. What did you see, where, and do you want the credit?