QuickTime flaws fixed in update

By

Researchers have discovered a number of flaws in Apple’s QuickTime media player that can result in DoS attacks and remote system access.

Apple has released an update for the flaws as part of QuickTime’s latest version, detailing the group of nine flaws on its support website.


Malicious users could create corrupt QuickTime, Flash, H.264, MPEG4 and AVI movies or FlashPix, PICT, BMP and JPEG images to take advantage of the flaws, which can result in application crash or arbitrary code execution, according to numerous security advisories.

The new version can be downloaded via software update preferences or from Apple downloads, according to the Cupertino, Calif., company.

Mike Price of McAfee’s AVERT Labs discovered six of the nine flaws, according to vulnerability monitoring form Secunia.

The flaws were first discovered on March 7, according to eEye Digital Security, which also published an advisory for the flaws.

Got a news tip for our journalists? Share it with us anonymously here.
Copyright © SC Magazine, US edition
Tags:

Most Read Articles

India's alarm over Chinese spying rocks CCTV makers

India's alarm over Chinese spying rocks CCTV makers

Hackers abuse modified Salesforce app to steal data, extort companies

Hackers abuse modified Salesforce app to steal data, extort companies

Woolworths' CSO is Optus-bound

Woolworths' CSO is Optus-bound

Cyber companies hope to untangle weird hacker codenames

Cyber companies hope to untangle weird hacker codenames

Log In

  |  Forgot your password?