07 Nov 2005
Users of Apple's QuickTime media player need to upgrade or face a potentially critical attack, Danish security testing firm Secunia has warned in an online advisory.
Hackers could craft a special .mov file which could be used to attack two flaws in the player. Two further critical flaws can be found in the Null pointer code, and when handling Pict files.
QuickTime versions 6.5.2 and 7.0.1 are vulnerable, but the latest version of the software, available for download here, fixes the problems.
The vulnerabilities were first discovered by independent security expert Piotr Bania.
Latest stories from Security
Related articles
Related jobs
Poll
What is the most important IT priority for your company this year?
Sneak peek at the forthcoming glass-based machine
Connect with V3.co.uk
This paper focuses on a series of best practices and techniques for development teams looking to improve their software development processes
Why good data management at all levels is essential in the modern business (video, 6mins)
Our global consultancy client currently seeks a number...
Support Analyst x 1/2 Skills: Apple Mac OSX, Windows...
Network Consultant - London - 55-65k My client are...
A leading global provider of critical information to...
Keep up to date with the latest products, services and technologies from the world's leading IT companies. IThound.com brings you over 2,000 white papers, case studies and analyst reports.
Do you agree?
VERY Misleading
The headline for this story is VERY misleading. I checked my QT player to make sure mine was updated. (it is) Would the author like to explain his reasons for just such a headline? Hackers have NOT attacked the QT player, or any piece of Macintosh software. I think that fact is important, and a valuable fact that our Win XP using friends would like to know.
Posted by: Tim Bush 07 Nov 2005
Yes. . .
Maybe one day we will actually see a viral/worm/trojan attack on the Mac. Actually I can recall one guy that actually erased his home directory because he ran a shell script that required his admin passwd that recursively deleted his files.
Posted by: Ron Bannon 07 Nov 2005
What evidence is there...
...that hackers "worm into applie's QuickTime" as the headline states? Shouldn't it read: COULD worm into an outdated version of QuickTime? More FUD it seems....sigh.
Posted by: George 07 Nov 2005
what hackers?
what is this article talking about? did someone reported an actual attack?
Posted by: Bert C 07 Nov 2005
Very Misleading Article Title
Hackers didn't do anything, Apple patched security holes. there is a difference
Posted by: Tom Boucher 07 Nov 2005
Title a Misrepresentation
I honestly cannot believe how totally dishonest and misrepresentative the title to this article was. 1) It implies that hackers attacked QuickTime. That is false. In fact, no hacker or cracker has ever created any malware that is in the wild and that attacks QuickTime 2) It implies that it is still a problem. In fact, this was fixed with an update (to 7.0.3) a month ago! You did not even mention that the fix for this was available before it was announced. I respectfully request that you start using some journalistic integrity and change both the title and the omission.
Posted by: Don Kraig 07 Nov 2005
Good GOd I'm sick of these security companies
It's like, "WATCH OUT! Don't go outside! There are MADMEN IN CARS driving up and down the street and it's possible you may be HIT by a DRUG-CRAZED PSYCHO ON ACID resulting in your DEATH. Only our patented HELMET can save your life." I pay increasinly little attention to these scare-mongers, which is a very bad thing - some day they may not be crying wolf but it will be impossible for me to tell.
Posted by: maxplanar 07 Nov 2005