OS/Platform/Application:

Apple Quicktime (on Windows and Mac systems)
Apple iTunes (Windows and Mac systems)
Apple iPod Touch
Apple Bonjour Service (Windows only)

Category: ALERT
Severity: HIGH
Attention: Apple Quicktime, iTunes, iPod Touch and Bonjour (Windows) users, System Administrators, Desktop Support Personnel.

Summary: On September 9 2008 Apple released security updates for four of its popular products.  The Quicktime update addresses nine vulnerabilities that could be exploited if a user was tricked into viewing a maliciously-crafted movie or media file.  The iTunes update addresses two vulnerabilities that could be exploited by a local or remote user.  The iPod Touch update addresses five vulnerabilities that relate to networking and website-access threats.  The Bonjour service update  addresses two vulnerabilities related to Domain Name Service (DNS) issues.

Recommended Actions:  Users/System Administrators are encouraged to read the security bulletins and (if appropriate) install the necessary security updates as soon as possible.  Please note that the iPod Touch updates can only be installed via the iTunes service; it is therefore recommended that iPod touch users first install the updated version of iTunes and then update their iPod touch systems.  The Bonjour service (on Windows) is usually installed to assist with the discovery, installation, and configuration of network printers.  The service is sometimes installed along with iTunes.  Default installations of Bonjour are typically found in a system's Program Files folder.  If you are unsure whether or not Bonjour is installed on your computer you can search for a file or folder called 'Bonjour' on your hard drive(s).

Readers are encouraged to share this alert with family, friends, and associates.

ITS Actions: N/A

Resources:

Apple Quicktime Security update/download page:
http://support.apple.com/kb/HT3027

Apple iTunes Security update/download page:
http://support.apple.com/kb/HT3025

Apple iPod Touch Security update (information) page:
http://support.apple.com/kb/HT3026

Apple Bonjour Service update/download page:
http://support.apple.com/kb/HT2990