The flaw was first discovered as part of a "hack-a-Mac" contest at the Vancouver, B.C. conference, for which researcher Dino Dai Zovi won $10,000.
Terri Forslof, manager of security response at TippingPoint, said today that "new facts have emerged as we have had time to analyse (the flaw) further."
"Initially the proof-of-concept code provided by the researcher, Dai Zovi, only worked against the Safari and Firefox browsers. We have now verified that this issue affects both Windows and Mac operating systems, including Windows Vista through Internet Explorer," she said. "We strongly believe at this point that any Java-enabled browser that has the vulnerable QuickTime Java extension installed is affected by this issue."
The flaw was initially believed to affect only Apple’s Safari browser.
QuickTime flaw found, also affects Internet Explorer on Vista
By
Frank Washkuch
on
Apr 26, 2007 9:48AM
Researchers at TippingPoint said today that the vulnerability exploited last week to hack into a MacBook Pro at CanSecWest also affects Microsoft's Internet Explorer browser on the Windows Vista operating system.
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
Promoted Content
How to turn digital complexity into competitive advantage
Promoted Content
Security: Understanding the fundamentals of governance, risk & compliance
Promoted Content
Security "mindset shift" needed to protect organisations
Promoted Content
The Great Resignation has intensified insider security threats
Sponsored Whitepapers
Free eBook: Digital Transformation 101 – for banks
Why financial services need to tackle their Middle Office
Learn: The latest way to transfer files between customers
Extracting the value of data using Unified Observability
Planning before the breach: You can’t protect what you can’t see
