AfterDawn: News

Apple patches flaw in QuickTime software

Apple Computer Inc. has patched a flaw in Quicktime that could be exploited by an attacker to run arbitrary code on a machine. The bug was discovered by a group of researchers who were investigating the Macintosh operating system and some third party software titles for it as part of the "Month of Apple Bugs" program. A total of 31 discovered vulnerabilities will be announced as a result.

This specific bug in QuickTime could be exploited using a specially crafted web page to cause a buffer overflow vulnerability in order to execute the arbitrary code. So far this is only issue patched by Apple itself. The fix prevents the Quicktime software from launching a malicious RTSP URL by performing additional validation.



Source:
Betanews

Written by: James Delahunty @ 24 Jan 2007 18:31

• Previous article

• UK company sues Apple over click wheel

• Next article

• eMusic reaches 250,000 subscribers

• 5 comments

• tabletpc

  yea but big deal they fixed it right away which is common for macintosh but apple fixing windows versions heck no so have fun if you have windows
  

  25.1.2007 00:41 #1

• Netman66

  Apple wants Apple business, not PC business, Flaws in the PC version, TOUGH, switch to a MAC.

  28.1.2007 04:13 #2

• luvshisex

  Nah. If you've got perfectly good hardware with a crappy os why blame the hardware? Just download and burn your favorite flavor of the linux os - it's free - and delete the M$ stuff from your hard drive. Then install linux. Virus? What's a virus?
  

  28.1.2007 12:45 #3

• ChappyTTV

  No, you've got it all wrong.
  It's not a patch for Mac users only, it's that the patch is only found at Apple and nowhere else yet.
  PC users can apply the patch just as any Mac user can, they just have to go tp APPLE to get it.

  28.1.2007 16:40 #4

• solarf

  so anyone can get the patch?
  

  30.1.2007 08:02 #5