Apple has shipped a critical iTunes update to fix a security vulnerability that exposes Windows users to malicious hacker attacks. The latest iTunes 9.2.1 is available for Windows XP, Windows Vista and Windows 7. A buffer overflow exists in the handling of itpc: URLs. Accessing a maliciously crafted itpc URL may lead to anunexpected application termination or arbitrary code execution. The patched iTunes update is available from Apple s download website.
Source: https://threatpost.com/apple-ships-critical-itunes-windows-patch-071910/74229/