It's been years since a major online computer virus or worm such as Nimda or Red Alert has crippled millions of computers across the Internet.
But don't breathe a sigh of relief just yet. There are plenty of dangers out there, and many of the newest target popular programs like
iTunes or RealPlayer.
~~~~~~~~~
Security experts believe hackers and online criminals have turned to exploiting weaknesses in these programs for a number of reasons.
First, since programs such as iTunes and RealNetwork's RealPlayer are designed to retrieve entertaining content from the Net, the files retrieved and used by these programs are not normally considered a security threat. And hackers can exploit this false sense of security to their advantage.
For example, the iTunes flaw highlighted in the SANS report supposedly allows hackers to gain control of a computer with a cleverly designed file that can be downloaded from the Internet like any other digital music file. The file is constructed in such a way that when it's accessed by the iTunes program, it overwhelms the music software, leaving iTunes — and the PC — vulnerable to other programs that can be installed by the hacker.
http://abcnews.go.com/Technology/story?id=967988&page=1
I don't use iTunes, but my version of Realplayer is really old. The last time I tried upgrading it, the new version disabled some of my image management functions and I backed it off. I guess that means I'm vulnerable.