Apple Media Files and iPhone

Marius van Oers McAfee

  download slides (PDF)

Apple has a big marketshare when it comes to digital music players, its various versions of the iPod products are highly popular. The more recent versions also support video files.

It is possible to add metadata to iTunes files, and to Quicktime Movies, with for example the Quicktime metadata APIs. This could theoretically open the way for malicious code to be inserted in them.

Another point of interest is the recently announced Apple iPhone. That product integrates functionality from iPod, can make phone calls, but it also supports rich HTML email. The integration of all these may also open a door for malicious items.