Security update a part of Apple TV 1.1

Stephen Withers
Thursday, 21 June 2007 03:56

Business IT - Technology

YouTube playback isn't the only reason for updating your Apple TV's software: version 1.1 also delivers a security update.

The original software had a buffer overflow vulnerability in its UPnP IGD (Internet Gateway Device Standardized Device Control Protocol) code. A maliciously crafted packet could cause the Apple TV to crash or - with more effort on the part of the attacker - trigger the execution of code carried by the packet.

UPnP IGD is used by Apple TV to create port mappings on NAT gateways.

The new software will be automatically downloaded and installed by Apple TVs. However, each device only checks for new software once a week, so it may be desirable to force an immediate update by selecting Settings>Update Software on the Apple TV.

The currently installed version can be checked by selecting Settings>About.