The latest security patch for Mac OS X fixes a QuickTime vulnerability that
could let attackers capture images from a user's screen and upload them to a
remote site.
Apple said
that the vulnerability does not affect Windows users or versions of Mac OS prior
to 10.4.
The vulnerability is not related to the
QuickTime flaw
that spread through social networking site
MySpace
last week.
The new flaw involves QuickTime for Java, a component that lets Java applets
display QuickTime movies, and Quartz Composer, a software tool used to render
images in Mac OS.
According to Apple, an attacker could place JavaScript code on a website that
would use the QuickTime for Java component to obtain screen images and send them
to a remote location, possibly allowing the attacker to obtain sensitive
information displayed on the screen.
The security fix closes the vulnerability by not allowing unsigned Java
applets to access Quartz Composer.
The patch can be downloaded from Apple's website or through OS X Software
Update.
Do you agree?
Have your say on this article