QuickTime versions 6.5.2 and 7.0.1 are vulnerable
Hackers could worm into Apple's QuickTime
/v3-uk/news/1995220/hackers-worm-apples-quicktime
07 Nov 2005, Iain Thomson , V3
Users of Apple's QuickTime media player need to upgrade or face a potentially critical attack, Danish security testing firm Secunia has warned in an online advisory.
Hackers could craft a special .mov file which could be used to attack two flaws in the player. Two further critical flaws can be found in the Null pointer code, and when handling Pict files.
QuickTime versions 6.5.2 and 7.0.1 are vulnerable, but the latest version of the software, available for download here, fixes the problems.
The vulnerabilities were first discovered by independent security expert Piotr Bania.
© Incisive Media Investments Limited 2010, Published by Incisive Financial Publishing Limited, Haymarket House, 28-29 Haymarket, London SW1Y 4RX, are companies registered in England and Wales with company registration numbers 04252091 & 04252093
Do you agree?
VERY Misleading
The headline for this story is VERY misleading. I checked my QT player to make sure mine was updated. (it is) Would the author like to explain his reasons for just such a headline? Hackers have NOT attacked the QT player, or any piece of Macintosh software. I think that fact is important, and a valuable fact that our Win XP using friends would like to know.
Posted by Tim Bush, 07 Nov 2005
Yes. . .
Maybe one day we will actually see a viral/worm/trojan attack on the Mac. Actually I can recall one guy that actually erased his home directory because he ran a shell script that required his admin passwd that recursively deleted his files.
Posted by Ron Bannon, 07 Nov 2005
What evidence is there...
...that hackers "worm into applie's QuickTime" as the headline states?
Shouldn't it read: COULD worm into an outdated version of QuickTime?
More FUD it seems....sigh.
Posted by George, 07 Nov 2005
what hackers?
what is this article talking about? did someone reported an actual attack?
Posted by Bert C, 07 Nov 2005
Very Misleading Article Title
Hackers didn't do anything, Apple patched security holes. there is a difference
Posted by Tom Boucher, 07 Nov 2005
Title a Misrepresentation
I honestly cannot believe how totally dishonest and misrepresentative the title to this article was.
1) It implies that hackers attacked QuickTime. That is false. In fact, no hacker or cracker has ever created any malware that is in the wild and that attacks QuickTime
2) It implies that it is still a problem. In fact, this was fixed with an update (to 7.0.3) a month ago! You did not even mention that the fix for this was available before it was announced.
I respectfully request that you start using some journalistic integrity and change both the title and the omission.
Posted by Don Kraig, 07 Nov 2005
Good GOd I'm sick of these security companies
It's like, "WATCH OUT! Don't go outside! There are MADMEN IN CARS driving up and down the street and it's possible you may be HIT by a DRUG-CRAZED PSYCHO ON ACID resulting in your DEATH. Only our patented HELMET can save your life."
I pay increasinly little attention to these scare-mongers, which is a very bad thing - some day they may not be crying wolf but it will be impossible for me to tell.
Posted by maxplanar, 07 Nov 2005