Apple Plugs QuickTime Security Holes
601095
Apple on Monday put out new releases of iTunes and QuickTime for both Mac OS X and Windows, adding support for the company's Apple TV product in the former and patching 8 serious security holes in the latter.
299728
TechWeb - The worm, dubbed &quot;Quickspace,&quot; exploits a bug in QuickTime JavaScript support and affects current Windows and Mac editions of QuickTime.
29646
Users of Firefox yesterday began receiving notices of the availability of version 2.0.0.7, which the Mozilla organization said addresses a vulnerability involving Apple's QuickTime plug-in. In BetaNews tests of the new version this afternoon, the vulnerability in question appears to have been fully patched.
573469
MacCentral - Apple on Monday released Security Update 2004-09-30, which fixes two AFP Server and CUPS issues as well as problems with NetInfoManager, postfix and the ServerAdmin component in Mac OS X Server v10.2.8 and v10.3.5. In addition, a QuickTime heap buffer overflow problem that could allow someone to execute code hidden in a BMP has been repaired. The CUPS and QuickTime fixes apply to Mac OS X v10.3.5 and v10.2.8 as well as the Server versions of each while the others apply only to the user and Server editions of v10.3.5.
47142
Flaw made it possible to remotely access home networks Apple has patched a security hole in its Apple TV box that made it possible for remote hackers to access a user's network and spy on traffic passing through it.â¦
261953
Apple has updated software on its iPod Photo digital music player to prevent users from playing music bought from RealNetworks&#39; online music store.
23136
The hacker who discovered a recently patched QuickTime flaw affecting the Firefox browser says he has found an equally serious flaw in Adobe Systems Inc.&#39;s PDF file format.
634907
Researchers are publishing security vulnerabilities this week that could offer attackers new ways to get into the enterprise. Mozilla updated its Firefox Web browser on Tuesday to thwart attacks that target a flaw in Apple&#39;s QuickTime player. Meanwhile, security researchers detailed new vulnerabilities in Windows and Windows Media player.
745068
InfoWorld - A recent string of high-profile ActiveX vulnerabilities caused the U.S. Computer Emergency Readiness Team (US-CERT) to advise users to disable the ubiquitous Microsoft browser plug-in technology altogether. The vectors for these recent exploits include a third-party image uploading tool used on both the Facebook and MySpace social networking sites, and flaws found in Yahoo's Music Jukebox, Real Networks' RealPlayer, and Apple's QuickTime.
146614
F-Secure warns of a rogue software application targeting the Mac that purports to clean a user's system.
216653
Buffer overflow risk neutered In all the hoopla surrounding Apple's announcement of its revamped line of iPods on Wednesday, many users might have missed the company's update to iTunes, which includes a fix for a serious security flaw.â¦
495234
Apple has released a new security patch for QuickTime, its eighth update this year for the media player software.
663104
Apple has released a new security patch for QuickTime, its eighth update this year for the media player software.The update addresses three critical security holes in QuickTime, including a vulnerability that has been used in attacks by online criminals.The most critical of the flaws lies in QuickTime&#39;s implementation of the Real Time Streaming Protocol (RTSP), used to play audio and video over the Internet. The flaw was made public Nov. 23, and in early December&#160;attackers began exploiting the flaw in online attacks. By tricking victims into visiting a malicious Web site that exploited the flaw, hackers were able to install malicious software on the victims&#39; PCs.To date, these attacks have targeted Windows-based systems, but security experts say that Mac OS X users are also at risk to the vulnerability. Apple issued patches for both Windows and Mac OS X users on Thursday.The second critical vulnerability, which had apparently not been publicly disclosed , has to do with a flaw in the QuickTime Media Link (QTL) file format used by the media player. Security researchers have recently been looking at the way QuickTime works with these files as a potential source of new bugs.Apple also patched a handful of similar bugs in the way that QuickTime handles Adobe&#39;s Flash media format. The most serious of these flaws could let attackers run unauthorized software on the computer, much as the RTSP bug does, Apple said.With security researchers paying special attention to media format bugs, Apple has had to patch QuickTime frequently this year. Some of these updates have come just weeks apart. Apple last patched QuickTime on Nov. 5.&#160;
36424
Complaints roll in claiming a problem in which QuickTime 7.4 disables Adobe After Effects.
229312
A bug in a flawed QuickBooks update that deleted users' files could strike again if the software is used at public Wi-Fi hot spots.
250588
Apple fixes a critical bug in its QuickTime media player software that had been worrying security experts for nearly a month.
143389
This QuickTime buffer overflow vulnerability appears to be different from a similar vulnerability patched by Apple in December 2007.