Apple QuickTime update lances multiple bugs
22583
Switch to manual Apple has released an updated version of its popular QuickTime media playback software that fixes eight security vulnerabilities.â¦
474048
Apple's first security updates of the year plug holes in its QuickTime player, iPhone, and iPod.
29646
Users of Firefox yesterday began receiving notices of the availability of version 2.0.0.7, which the Mozilla organization said addresses a vulnerability involving Apple's QuickTime plug-in. In BetaNews tests of the new version this afternoon, the vulnerability in question appears to have been fully patched.
655104
Apple has released a security fix for its QuickTime media player software, fixing a critical bug that had been worrying security experts for nearly a month.The update, released Wednesday, fixes a vulnerability in the RTSP (Real Time Streaming Protocol) used by QuickTime to handle streaming media.On Jan. 10, researcher Luigi Auriemma disclosed the flaw by posting proof-of-concept attack code that could be used to run unauthorized software on a victim&#39;s computer. For the attack to work, the criminal would have to first trick the user into viewing a maliciously encoded QuickTime media file.With the attack code available, security researchers had been hoping that Apple would address the flaw. Wednesday&#39;s QuickTime 7.4.1 update is for both the Mac OS X and Windows operating systems.It is Apple&#39;s fifth QuickTime update since October. The company has been forced to issue the flurry of patches as security researchers have taken a closer look at media player flaws during the past year. In December, Apple patched a separate RTSP vulnerability, which online criminals had already started to use in their attacks.&quot;In the past few months, QuickTime has been a prevalent target for security researchers,&quot; said Andrew Storms, director of security operations with nCircle Network Security. &quot;Internet media applications on the desktop have been a rich target for attackers, and this trend is sure to continue as most users aren&#39;t yet accustomed to attacks arriving in the form of a viral video.&quot;
539029
Users running Intuitâs Apple Macintosh version of QuickBooks Pro 2006 and 2007 were warned that an automatic software update flaw can eradicate stored files.
21234
Apple kept its rush of year-end security patches coming Monday, issuing a flurry of fixes for its Mac OS X operating system and the test version of its Safari browser.Monday&#39;s patches included a whopping 31 updates for the Apple operating system. The Mac OS X patches fix components ranging from the Address Book and iChat software to under-the-covers operating system components such as ColorSync, the IO Storage Family, and the Perl, Python and Ruby programming languages.Most of these flaws theoretically could be exploited by attackers to run unauthorized software on the Mac, although some of them had other security implications, such as allowing an attacker to gain access to sensitive information or download files to the computer without authorization.These updates are for the Mac OS X 10.4 and 10.5 operating systems, known as Tiger and Leopard, respectively.Apple also released a minor update to its Safari 3 beta code, which runs on Windows as well as Mac OS X, fixing a cross-site scripting security problem that affects Windows users.The patches come just days after&#160;Apple released a major update to its QuickTime media player and a Java security fix for the Mac OS X 10.4 operating system, code-named Tiger. The QuickTime flaw was particularly serious, as&#160;it had been exploited by online criminals since early December.With hackers and security researchers now paying more attention to Apple&#39;s products, the company&#39;s security team has been working overtime on bug fixes this year. Monday&#39;s patches were Apple&#39;s 35th and 36th security updates this year. In 2006, the company released just 22 sets of patches for its products.
2910
Blog: Programmers release an early but incomplete and crash-prone version of the open-source office suite for Mac OS X's native Aqua interface.
36424
Complaints roll in claiming a problem in which QuickTime 7.4 disables Adobe After Effects.
758734
(InfoWorld) - Mozilla has fixed a critical bug in the way the Firefox browser works with QuickTime media files. The flaw, which was reported last week by hacker Petko Petkov, gives attackers a way to run unauthorized commands on a victim's PC. "This could be used to install malware, steal local data, or otherwise corrupt the victim's computer," Mozilla said in a security advisory published Tuesday. A July 2007 patch was supposed to take care of this type of problem, but Petkov showed how attackers could still run commands on a victim's system by tricking a victim into opening a maliciously coded QuickTime media file. In fact, until Apple addresses the underlying flaw in QuickTime, there still could be headaches for users, Mozilla said in its security advisory on the issue. "QuickTime Media-link files could still be used to annoy users with popup windows and dialogs until this issue is fixed in QuickTime," the advisory states. The common security measure of disabling JavaScript does not prevent this attack, although the NoScript Firefox add-on does provide protection, Mozilla said. "Petkov provided proof of concept code that may be easily converted into an exploit, so users should consider this a very serious issue," Mozilla's security chief, Window Snyder said in a recent blog posting. Mozilla has been able to reproduce this bug only on the Windows operating system, she added. The flaw also affects the Internet Explorer browser, Petkov said on his blog. However, IE's security policies make the flaw less critical on Microsoft's browser, he added. The Firefox 2.0.0.7 update was pushed out to users starting around 3 p.m. Pacific Time on Tuesday. It contains only one security update: the QuickTime fix.
103702
Blog: Many of the patches address flaws within QuickTime for Java.
441740
Apple quietly pushed out a new 7.4.1 QuickTime update to stop attacks through maliciously crafted Web sites, as well as to its iPhoto '08 software.
40844
Vulnerabilities in Apple's widely used QuickTime media player software can expose both Macs and Windows PCs to attack.
736315
An issue with how QuickTime handles JavaScript in conjunction with a MySpace vulnerability is spreading through the popular social networking site, security firm Websense reports.
599698
A London security analyst working with the open source group GNUCitizen has discovered a potentially serious exploit that could affect users of the Firefox browser and Apple's QuickTime movie and music player - especially iTunes customers - on Windows XP-based machines. BetaNews tested and verified the severity of the exploit.
504627
The company warns of serious vulnerabilities in its IOS software, releases update.
302277
Both Windows and Mac versions of the multimedia program have a buffer overflow flaw that puts users at risk.
423687
Apple's movie rental service is cool, but has a pair of flaws.