Apple Fixes Serious QuickTime Bug
690958
One week after updating its Mac OS X operating system, Apple Inc. has patched a serious flaw it its QuickTime media player.
557177
Aspyr Media has posted an incremental update that squashes bugs, smooths play.
717783
InfoWorld - Apple has released a new security patch for QuickTime, its eighth update this year for the media player software.
302277
Both Windows and Mac versions of the multimedia program have a buffer overflow flaw that puts users at risk.
573469
MacCentral - Apple on Monday released Security Update 2004-09-30, which fixes two AFP Server and CUPS issues as well as problems with NetInfoManager, postfix and the ServerAdmin component in Mac OS X Server v10.2.8 and v10.3.5. In addition, a QuickTime heap buffer overflow problem that could allow someone to execute code hidden in a BMP has been repaired. The CUPS and QuickTime fixes apply to Mac OS X v10.3.5 and v10.2.8 as well as the Server versions of each while the others apply only to the user and Server editions of v10.3.5.
36424
Complaints roll in claiming a problem in which QuickTime 7.4 disables Adobe After Effects.
322939
Blog: iPhone Camera Roll Bugs, Picture Quality, Lifestyle
467671
A software update for MacBook and MacBook Pros addresses an issue that caused the keyboard to freeze.
683249
Apple has released a patch designed to stop annoying audio problems that users began reporting after updating their systems to Mac OS X 10.4.10 almost two weeks ago.
663104
Apple has released a new security patch for QuickTime, its eighth update this year for the media player software.The update addresses three critical security holes in QuickTime, including a vulnerability that has been used in attacks by online criminals.The most critical of the flaws lies in QuickTime&#39;s implementation of the Real Time Streaming Protocol (RTSP), used to play audio and video over the Internet. The flaw was made public Nov. 23, and in early December&#160;attackers began exploiting the flaw in online attacks. By tricking victims into visiting a malicious Web site that exploited the flaw, hackers were able to install malicious software on the victims&#39; PCs.To date, these attacks have targeted Windows-based systems, but security experts say that Mac OS X users are also at risk to the vulnerability. Apple issued patches for both Windows and Mac OS X users on Thursday.The second critical vulnerability, which had apparently not been publicly disclosed , has to do with a flaw in the QuickTime Media Link (QTL) file format used by the media player. Security researchers have recently been looking at the way QuickTime works with these files as a potential source of new bugs.Apple also patched a handful of similar bugs in the way that QuickTime handles Adobe&#39;s Flash media format. The most serious of these flaws could let attackers run unauthorized software on the computer, much as the RTSP bug does, Apple said.With security researchers paying special attention to media format bugs, Apple has had to patch QuickTime frequently this year. Some of these updates have come just weeks apart. Apple last patched QuickTime on Nov. 5.&#160;
300950
Update addresses potential denial-of-service vulnerabilities as well as a flaw in QuickTime.
103702
Blog: Many of the patches address flaws within QuickTime for Java.
711687
Browser breakdowns seem to be endemic among the major players this month. Days after Microsoft released a patch to repair a bad update to Internet Explorer 6, Apple put forth a fix for its Safari browser.
299728
TechWeb - The worm, dubbed &quot;Quickspace,&quot; exploits a bug in QuickTime JavaScript support and affects current Windows and Mac editions of QuickTime.
686050
(InfoWorld) - New technical details about Apple's iPhone leaked to the Web by a University of Washington technology group but since yanked from the school's site confirmed that the device will not support Adobe's Flash, will rely on QuickTime to display audio and video, and can keep only eight Safari-displayed Web pages in memory at one time. The University of Washington's emerging technology team posted information gleaned from an iPhone session at last week's WWDC (Worldwide Developers Conference). The nitty-gritty details spelled out during the "Designing Web Content for the iPhone" presentation, according to the team, include: * No support for Flash, Adobe's multimedia Web content format. * No Java. * JavaScript runtime limited to five seconds. * QuickTime used for audio and video. * A maximum of eight documents loaded in Safari on the iPhone. * Links to video on a Web page take users directly to full-screen playback. * Support for PDF through Apple's own DisplayPDF code, not Adobe. * Multiple gestures automatically available to Web sites viewed through iPhone without any additional coding, including pinching content to shrink, double-tapping to zoom, and two-fingered scrolling. Although the blog entry has disappeared -- replaced by a message that reads "The topic you are looking for have been deleted" -- the page was still viewable in Google's cache late Tuesday with a text-only version also available. Oren Sreebny, director of emerging technology at the school, said it wasn't Apple that called for the deletion. "Someone else in our organization who had [also] gone to WWDC, pointed out that it was probably in violation of a nondisclosure agreement. We didn't want to get into any trouble, so we removed it," said Sreebny. Apple requires all developers attending WWDC to sign an NDA that bars them from revealing any conference content except for CEO Steve Jobs' keynote. Earlier this week, the owner of a Web site that provides gas prices at local stations said his server logs showed several iPhone-equipped users had visited the URL using a browser identified as Safari Version 419.3. "[That's] the 'old' Safari, not the 3.0 beta," said the unidentified site owner. That information matches what Sreebny's group had posted; according to the WWDC session notes, the iPhone version of Safari IDs itself to sites as Version 419.3. The GasApp.com site owner also reported that Safari on the iPhone was running in 320 x 396 resolution for the Web viewing area. "But I don't know if that includes the controls at the bottom or not," said the site operator. The iPhone goes on sale June 29 in the U.S.
763006
Update fixes crashes caused by incompatibility with hidden advertising app.
56222
Hot Fuzz Security hunters have discovered numerous bugs in a Windows version of Safari, hours after Apple released a beta version of the browser into the wild.â¦