Apple has released iTunes 9.0.1 which addresses a buffer overflow in Mac OSX Server/Client and Windows. A malicious .pls file could be used to cause program termination or lead to code execution. The update improves the bound checking in iTunes. Users should install the update as soon as possible using Software Update or directly from http://www.apple.com/itunes/download/