Integer overflow in the AAC file parsing code in Apple iTunes before 6.0.5 on Mac OS X 10.2.8 or later and Windows XP and 2000 allows remote user-assisted attackers to execute arbitrary code via an AAC (M4P M4A or M4B) file with a sample table size (STSZ) atom with a \malformed\ sample_size_table value.