All right, serious question: iTunes on Windows has Services; are priv elevations possible?

The iPodService.exe (sp?) service runs as LocalSystem and iTunesHelper.exe runs as the user currently logged on. These things probably communicate with each other.

Can this combination result in a privilege elevation exploit due to this or some other vulnerability? Because this would be a "critical" problem to me, as it could grant admin access to non-admins, and allow all sorts of abuse.