Vulnerabilities affect OS X and Windows versions
vnunet.com, 09 Nov 2007
Apple has patched seven vulnerabilities in the latest version of QuickTime affecting the Windows and MacOS X versions of the media player software.
Each of the vulnerabilities affects users of MacOS 10.3.9, 10.4.9 and 10.5 as well as Windows XP and Vista.
Six of the vulnerabilities could allow attackers to remotely execute code on the targeted machine.
Three of the remote code execution vulnerabilities could be exploited when the user launches a specially-crafted movie file.
Two are exploited by way of malformed Pict files, and one can be targeted by way of a specially-crafted QuickTime VR file.
The update also addresses a flaw in the way QuickTime handles untrusted Java applets. Apple said that this could allow an attacker to run malicious Java code on the user's machine.
The update fixes the issue by preventing untrusted applets from running QuickTime's Java components.
Users can obtain the update through Apple's Software Update utility or the Apple Downloads site.
Counterfeiters target UK market ahead of official launch
Minor upgrade to the video player
How web services contribute to data headaches
Remote access - Three steps to getting connected
3.4 million UK professionals now work from home – is your company equipped?
Cost benefits of a global collaboration network
This white paper is a must read for organisations looking for evidence of the bottom-line benefits of high-definition video and voice communications
Keep up to date with the latest products, services and technologies from the world's leading IT companies; IThound.com brings you over 6,000 white papers, case studies and analyst reports.
Chris Adams, Office Client product manager for Microsoft UK, explains...
Critics says government proposals to curb illegal downloading are unworkable...
Do you agree?
Have your say on this article