Apple QuickTime
The flaws target the way QuickTime handles certain types of malformed files

Apple patches 'critical' QuickTime flaws

Update fixes eight vulnerabilities in multimedia software

Shaun Nichols in California

Apple has issued eight security updates for the Mac OS X and Windows versions of its QuickTime multimedia software. 

The French Security Incident Response Team issued its most severe security rating of 'critical' for all the flaws. 

Advertisement

All eight vulnerabilities affect current versions of QuickTime for Windows Vista, XP and 2000. Seven also affect Mac OS X versions 10.3.9 and later.

The flaws target the way QuickTime handles certain types of malformed files. When specially-crafted files, including QuickTime, PICT, MIDI and QTIF, are launched, an application crash can be triggered, allowing an attacker to remotely install and execute malware.

"If you use QuickTime I would definitely recommend that you install the update as soon as possible," said SANS security researcher Bojan Zdrnja. "Some of those security vulnerabilities look nasty." 

Users can install the patch through Apple's support website or through the Software Update component built into Mac OS X.

This release is the first QuickTime-specific patch issued by Apple since January, when the company fixed a vulnerability introduced during the Month of Apple Bugs project.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Related whitepapers

Related jobs

Most watched

Social networking

Summit: How businesses should manage their brands online

In part one of V3.co.uk's interview with Dirk Singer, he dicusses social media monitoring strategies

RIM discusses new developer tools

Blackberry exec on the latest offerings for programmers

Analysis and Reports

Remote access - Three steps to getting connected

3.4 million UK professionals now work from home – is your company equipped?

Cost benefits of a global collaboration network

This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications

Poll

Impact of Information Overload poll

Impact of Information Overload poll

What is the biggest problem your firm faces as a result of the data explosion?

View poll results

Advertisement

White paper library

Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Spotlight

Alcatel-Lucent logo

Summit: Networks swamped by information overload

Alcatel-Lucent's Neal Tilley talks about how enterprises and carriers can...

EU flag

Breach notification laws get green light

Privacy rights strengthened in Europe

Richard Thomas

Summit: Richard Thomas advises on handling the data deluge

Former Information Commissioner speaks out on government databases and data...

oracle sun

War of words escalates between EU and Oracle

Commission comes out fighting after criticism from Oracle and Washington

Primary Navigation