Mobile/PDA About Us Advertise here


		User name	Password

		Not registered yet? Register here. Lost your password? Click here.

Browse by topic

News

Apple fixes two QuickTime flaws

31 May 2007 19:54 by James "Dela" Delahunty | 3 comments

Apple Inc. has fixed more serious security bugs with QuickTime. This time, users tricked into visited malicious webpages could either have their privacy breached or worse, have arbitrary code executed on their computers. The patches released are for both Microsoft's Windows operating systems and the Mac platforms.

The worst of the two involved QuickTime's implementation of Java, which could allow for the manipulation of objects outside what should be allowed by the allocated heap. "By enticing a user to visit a web page containing a maliciously crafted Java applet, an attacker can trigger the issue which may lead to arbitrary code execution," Apple said in this advisory.

The second flaw deals also deals with how QuickTime works with Java, and can lead to a user's web browser information being stolen, possibly putting sensitive information at risk. Apple gave credit to John McDonald, Paul Griswold, and Tom Cross of IBM Internet Security Systems X-Force and Dyon Balding of Secunia Research for reporting the flaws.

Source:
Reg Hardware

Permalink to this article

Apple patches security flaws in iPhone, QuickTime (16 January 2008)

Apple patches Windows Quicktime flaw (4 October 2007)

« Previous news article
PayPlay launches "the world's largest MP3 download store"

Next news article »
Set-top boxes and DTVs soon to get 60 FPS and 1080p decoding

Post your comment

Discuss this article!
thekingo7 (Senior Member) 1 June 2007 12:11
Quote: pple gave credit to John McDonald, Paul Griswold, and Tom Cross of IBM Internet Security Systems X-Force and Dyon Balding of Secunia Research for reporting the flaws. Gave them credit?? I'm sure a small portion of the computer populace knew about this before these guys came along. [ + quote]
borhan9 (AfterDawn Addict) 1 June 2007 19:18
Well thanxs for the update im going to update my quicktime now if it has flaws like this atm :) [ + quote]
Unfocused (Member) 28 June 2007 6:09
At least they take the time to fix these vulnerabilities. [ + quote]