Apple closes 11 mostly 'highly critical' QuickTime holes

By

Apple late Wednesday released an update to popular media player QuickTime, addressing 11 vulnerabilities that could be exploited by hackers to compromise PCs.

Apple closes 11 mostly 'highly critical' QuickTime holes
Apple late Wednesday released an update to its popular media player QuickTime, addressing 11 vulnerabilities that could be exploited by attackers to compromise PCs.

Most of the flaws, ranked "highly critical" by tracking firm Secunia, can be exploited to cause buffer overflows when unsuspecting end-users are tricked into viewing a maliciously crafted video file.

All of the 11 vulnerabilities affect unpatched Windows Vista machines, while nine impact systems running Mac OS X.

This is the third time this year that Apple has pushed out QuickTime updates.

Experts said many attackers are turning to media player exploits because users tend to trust links promising video. As a defense, users are advised not to visit untrusted websites or click on unknown links.

See original article on scmagazineus.com
Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:
applequicktimesecurity

Sponsored Whitepapers

Digital Transformation That Works in the Real World
Digital Transformation That Works in the Real World
Beyond the Breach: Logicalis Delivers Scalable, Business-Aligned MXDR Security
Beyond the Breach: Logicalis Delivers Scalable, Business-Aligned MXDR Security
Transforming IT for the Hybrid Era
Transforming IT for the Hybrid Era
Powering secure AI at the Edge: What you need to know before it’s too late
Powering secure AI at the Edge: What you need to know before it’s too late
Ditch the Spreadsheets. Build a System That Grows With You.
Ditch the Spreadsheets. Build a System That Grows With You.

Events

Most Read Articles

Microsoft knew of SharePoint security flaw in May, initial patch ineffective

Microsoft knew of SharePoint security flaw in May, initial patch ineffective
Allianz Life says majority of US customers' data stolen in hack

Allianz Life says majority of US customers' data stolen in hack
NT gov agency targeted in alleged $3.5m BEC scam

NT gov agency targeted in alleged $3.5m BEC scam
Gov to encourage vuln research, puts insurers and NFPs on notice

Gov to encourage vuln research, puts insurers and NFPs on notice
techpartner.news logo
Dave Stevens on Brennan's evolution and the need for Aussie tech unity
Dave Stevens on Brennan's evolution and the need for Aussie tech unity
Sydney's ITKnocks on contact centre AI and the slow death of the IVR
Sydney's ITKnocks on contact centre AI and the slow death of the IVR
"It's an exciting time to be part of the health and aged care sector"
"It's an exciting time to be part of the health and aged care sector"
Insicon founder Matt Miller on the coming 'tsunami' of compliance and educating boards about cyber security
Insicon founder Matt Miller on the coming 'tsunami' of compliance and educating boards about cyber security
Orro claims Australia first with managed digital asset discovery service
Orro claims Australia first with managed digital asset discovery service

Log In

  |  Forgot your password?