After Attacks, Apple Fixes QuickTime Bug
495234
Apple has released a new security patch for QuickTime, its eighth update this year for the media player software.
576682
A year-old QuickTime bug that hackers to hijack PCs and Macs with Firefox installed,  has Mozilla Corp. scrambling for a fix, according to Mozilla's chief security officer.
413975
(InfoWorld) - One week afterÂ updating its Mac OS X operating system, Apple has patched a serious flaw it its QuickTime media player. The security update to QuickTime 7.1.6, published Tuesday, fixes two issues in the way QuickTime works on the Java platform. The most serious of these problems could give criminals a way of taking control of an unpatched computer, Apple said in a security alert. "By enticing a user to visit a Web page containing a maliciously crafted Java applet, an attacker can trigger the issue which may lead to arbitrary code execution," the alert states. The second bug is considered to be less critical, but it could allow an attacker to have a look into the Web browser's memory and lead to the disclosure of sensitive information, Apple said. This latest QuickTime update is available for both Mac OS and Windows users. Apple's security team has been busy of late. Last week's Mac OS X patches fixed 17 flaws, several of which were considered to be critical. Apple also fixed a similar QuickTime for Java bug on May 1 after this flaw was used to claim a $10,000 Mac hacking prize at the April's CanSecWest security conference.ADVERTISEMENTIBM Information On Demand 2006Industrial Industry Leaders, please join us at IBM's premier information management global event, IBM Information On Demand 2006, October 15-20, Anaheim, CA. More IBM business and technical solutions content in one place than ever before! Select from  over 800 sessions. Register today!
344346
A critical bug in the way the Firefox browser works with QuickTime media files is now fixed in today's update.
711687
Browser breakdowns seem to be endemic among the major players this month. Days after Microsoft released a patch to repair a bad update to Internet Explorer 6, Apple put forth a fix for its Safari browser.
663104
Apple has released a new security patch for QuickTime, its eighth update this year for the media player software.The update addresses three critical security holes in QuickTime, including a vulnerability that has been used in attacks by online criminals.The most critical of the flaws lies in QuickTime&#39;s implementation of the Real Time Streaming Protocol (RTSP), used to play audio and video over the Internet. The flaw was made public Nov. 23, and in early December&#160;attackers began exploiting the flaw in online attacks. By tricking victims into visiting a malicious Web site that exploited the flaw, hackers were able to install malicious software on the victims&#39; PCs.To date, these attacks have targeted Windows-based systems, but security experts say that Mac OS X users are also at risk to the vulnerability. Apple issued patches for both Windows and Mac OS X users on Thursday.The second critical vulnerability, which had apparently not been publicly disclosed , has to do with a flaw in the QuickTime Media Link (QTL) file format used by the media player. Security researchers have recently been looking at the way QuickTime works with these files as a potential source of new bugs.Apple also patched a handful of similar bugs in the way that QuickTime handles Adobe&#39;s Flash media format. The most serious of these flaws could let attackers run unauthorized software on the computer, much as the RTSP bug does, Apple said.With security researchers paying special attention to media format bugs, Apple has had to patch QuickTime frequently this year. Some of these updates have come just weeks apart. Apple last patched QuickTime on Nov. 5.&#160;
11119
In what could be the quickest patch ever to be released by Microsoft, the company on Tuesday publicly issued a fix for the highly-publicized Vector Markup Language (VML) vulnerability that surfaced last week and was being actively exploited by numerous attacks.
40844
Vulnerabilities in Apple's widely used QuickTime media player software can expose both Macs and Windows PCs to attack.
602256
Just hours after Apple released its first Windows beta of Safari researcher Aviv Raff said he'd found a bug.
424439
10.3.7 fixes bugs, fills security holes
594089
InfoWorld - Apple has released its first security updates of the new year, fixing bugs in its QuickTime media player and iPhone and iPod touch devices.
701512
(InfoWorld) - Apple has patched a number of critical flaws in its QuickTime media player. With the 7.2 update, users can now view videos on the full screen with the QuickTime player, but the software also contains a number of critical security fixes. In total, Apple has addressed eight security vulnerabilities with the release, which was made public on Wednesday. Four of the flaws are due to memory corruption or integer overflow bugs that could cause the viewer to crash if QuickTime were used to view maliciously crafted movies or files. Another three critical flaws relate to design issues in QuickTime for Java. Attackers could theoretically exploit these flaws by posting malicious Java applets on a Web site, where they could then compromise a victim's computer. A final QuickTime for Java bug could "lead to the disclosure of sensitive information," Apple said in its security alert on the update. Also on Wednesday, Apple pushed out a new release of its iTunes music software that fixes "a minor problem with iTunes 7.3 accessing the iTunes Library," the company said. The QuickTime and iTunes updates are available for download by both Windows and Mac OS X users.
22372
Blog: Yahoo IM fixed after temporary problems
763006
Update fixes crashes caused by incompatibility with hidden advertising app.
36424
Complaints roll in claiming a problem in which QuickTime 7.4 disables Adobe After Effects.
750699
Bundle of fixes includes patch for zero-day Wi-Fi hijack flaw and other bugs, some that could let an attacker commandeer Macs.
45482
Blog: Many of the patches address flaws within Quicktime for Java.