Another Quicktime RTSP flaw announced
447903
This Quicktime buffer overflow vulnerability appears to be different from a similar vulnerability  patched by Apple in December 2007.
384670
For the second time this month and the fourth time this year, Apple Inc. has patched its QuickTime media player to close critical holes. Tuesday's patch addressed two bugs.
688722
Sample code that exploits a yet-to-be-fixed Windows flaw is circulating. Microsoft plans to deal with it on the next Patch Tuesday.
299728
TechWeb - The worm, dubbed &quot;Quickspace,&quot; exploits a bug in QuickTime JavaScript support and affects current Windows and Mac editions of QuickTime.
86222
In brief Exploit circulating for unpatched vuln
744060
Some Skype users were left vulnerable to a possible worm attack Wednesday after company technicians failed to disable a buggy component of the network.Skype&#160;pulled the plug on its &quot;Add Video to Chat&quot; feature&#160;Tuesday after security researcher Aviv Raff reported that it suffered from a serious vulnerability. An attacker could create a self-copying worm program that could be used to&#160;install malicious software on victims&#39; machines&#160;and then go on to infect other Skype users.&quot;Add Video to Chat&quot; lets users pick videos from two sites -- Dailymotion.com and Metacafe.com -- and add them to their Skype chat sessions.Skype blocked access to these sites Tuesday after Raff&#39;s disclosure, effectively disabling the feature.But because of a misconfigured Skype proxy server, some users were still allowed to access the Metacafe videos, leaving them vulnerable to an attack, said Raff, who had been in discussions with Skype engineering staff over this issue.Because Raff has not publicly released his exploit code, the oversight probably doesn&#39;t pose a serious security risk for most Skype users, Raff noted.Skype expects to patch the underlying vulnerability sometime next week, said a spokeswoman for Metacafe. That&#39;s later than previously expected. On Tuesday, Metacafe said that a patch was due early Wednesday morning.Metacafe believes it&#39;s unlikely that an attacker could successfully exploit the flaw in a widespread attack, but with Raff&#39;s proof of concept code, a Skype user has to simply click on a maliciously crafted Web link in order to be infected.According to Raff, Skype uses a Windows Internet Explorer component with an inappropriate security setting. Instead of rendering HTML from the Internet with the more secure &quot;Internet Zone&quot; security setting, Skype uses IE&#39;s &quot;Local Zone&quot; security setting, usually reserved for more trustworthy content.Skype representatives did not return calls seeking comment for this story.
250588
Apple fixes a critical bug in its QuickTime media player software that had been worrying security experts for nearly a month.
48572
Shhh, don't tell anyone RealNetworks has patched a vulnerability in its RealPlayer and HelixPlayer software that made it possible for attackers to run arbitrary code on a victim's machine. The security hole affects applications running on Windows, Mac and Linux platforms.â¦
413975
(InfoWorld) - One week afterÂ updating its Mac OS X operating system, Apple has patched a serious flaw it its QuickTime media player. The security update to QuickTime 7.1.6, published Tuesday, fixes two issues in the way QuickTime works on the Java platform. The most serious of these problems could give criminals a way of taking control of an unpatched computer, Apple said in a security alert. "By enticing a user to visit a Web page containing a maliciously crafted Java applet, an attacker can trigger the issue which may lead to arbitrary code execution," the alert states. The second bug is considered to be less critical, but it could allow an attacker to have a look into the Web browser's memory and lead to the disclosure of sensitive information, Apple said. This latest QuickTime update is available for both Mac OS and Windows users. Apple's security team has been busy of late. Last week's Mac OS X patches fixed 17 flaws, several of which were considered to be critical. Apple also fixed a similar QuickTime for Java bug on May 1 after this flaw was used to claim a $10,000 Mac hacking prize at the April's CanSecWest security conference.ADVERTISEMENTIBM Information On Demand 2006Industrial Industry Leaders, please join us at IBM's premier information management global event, IBM Information On Demand 2006, October 15-20, Anaheim, CA. More IBM business and technical solutions content in one place than ever before! Select from  over 800 sessions. Register today!
636506
In conjunction with its latest QuickTime update, Apple has also updated QuickTime Broadcaster.
33433
Second security patch in less than a week Apple has plugged two holes in its QuickTime media player that could create serious security problems for people tricked into visiting malicious websites. The release, which is available for both Windows and Mac platforms, is Apple's second security patch in less than a week.â¦
207269
Apple released yet another patch for its QuickTime media player today, killing of most of the app's ability to play Flash files.
123349
More VoIP security woes Skype has patched a flaw involving its SkypeFind feature. But the security researcher who discovered the flaw said the VoIP platform remains exposed to cross-zone scripting vulnerabilities, like the latest SkypeFind bug and an earlier flaw involving movie files.â¦Learn &amp; Contribute, Live &amp; Online - The Register Debates Green Computing
663829
The FrSIRT site has posted a new advisory for users of the Vivvo Article Management CMS software about potential holes that could allow for some very large-scale damage to be done.    Multiple vulnerabilities have been identified in Vivvo Article Management CMS, which could be exploited by remote attackers to compromise a vulnerable server.   The first issue is due to an input validation error in the "pdf_version.php" script that does not validate the "id" parameter before being used in SQL statements, which could be exploited by malicious people to conduct SQL injection attacks.   The second vulnerability is due to an input validation error in the "index.php" script that do not validate the "classified_path" parameter, which may be exploited by remote attackers to include local or remote scripts with the privileges of the web server.    Versions 3.2 and higher of the software are effected, and, unfortunately, there has been no patch issued for the issue.
72462
Security researchers are warning of a serious - and unfixed - security hole with the popular Winamp media player.
502866
For the second time in eight days, new critical vulnerabilities that could be used to hijack machines have been fingered in the RealPlayer media player.
675996
IT security experts have uncovered a critical vulnerability in the popular Winamp media player, which could be exploited by hackers to compromise a user&#39;s system.