Apple still offering Windows users flawed Quicktime version

According to Secunia, there is no way for Windows users to download a non-vulnerable version of the program.

"Rather than supplying the correct fixed version for download, Apple still provides the old vulnerable version," wrote Thomas Kristensen, chief technical officer at Secunia, in the company blog.

"To get the actual security upgrade, users have to go through a rigorous update process, which is entirely different from the download process.

To make matters worse, the update process isn't documented anywhere, so users may not even know where to begin."

Kristensen said Secunia was made aware of the problem by an “enormous” amount of feedback from users of the company’s free Secunia Software Inspector.

Users were complaining that after downloading the latest version of Quicktime the inspector was still returning results that claimed the program was vulnerable.

Users thought Secunia’s tool was broken, but after a quick download of the latest version of Quicktime, Secunia researchers were able to exploit it.

They highly recommend Windows Quicktime users run the Apple Software Update application that is bundled with Quicktime and install the available update called “Security Update 2007-1.”

appleflawedofferingquicktimesecuritystillusersversionwindows