All the latest UK technology news, reviews and analysis

Apple releases seven QuickTime fixes

by Shaun Nichols

More from this author

09 Nov 2007

Be the first to comment

  • Tweet this
Apple
Six QuickTime vulnerabilities could allow attackers to remotely execute code

Apple has patched seven vulnerabilities in the latest version of QuickTime affecting the Windows and MacOS X versions of the media player software.

Each of the vulnerabilities affects users of MacOS 10.3.9, 10.4.9 and 10.5 as well as Windows XP and Vista.

Six of the vulnerabilities could allow attackers to remotely execute code on the targeted machine.

Three of the remote code execution vulnerabilities could be exploited when the user launches a specially-crafted movie file.

Two are exploited by way of malformed Pict files, and one can be targeted by way of a specially-crafted QuickTime VR file.

The update also addresses a flaw in the way QuickTime handles untrusted Java applets. Apple said that this could allow an attacker to run malicious Java code on the user's machine.

The update fixes the issue by preventing untrusted applets from running QuickTime's Java components.

Users can obtain the update through Apple's Software Update utility or the Apple Downloads site.

Do you agree?

 

Add your comment

We won't publish your address
By submitting a comment you agree to abide by our Terms & Conditions. Your comment will be moderated before publication.

Poll

IT priorities for 2012

What is the most important IT priority for your company this year?

99%

0%

1%

0%

0%

Connect with V3.co.uk

Sign up to our daily or weekly newsletters

Accurev

Top 5 software development challenges

This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes

Talend

Rubbish in, rubbish enterprise

Why good data management at all levels is essential in the modern business (video, 6mins)

.Net Principal Development Engineer Lead- London

Principal Development Engineer Lead- London - Smart TV...

.Net Development Engineer - HTML, XHTML, CSS, DOM

Development Engineer - London - Smart TV, Gaming, Tablets...

Principal Development Engineer - .Net ,C# or Java -

Principal Development Engineer - London - Smart TV, Gaming...

Test Engineer -London - Smart TV, Gaming, Tablets, PC& Mac

Test Engineer -London - Smart TV, Gaming, Tablets, PC...

To send to more than one email address, simply separate each address with a comma.