AfterDawn: News

Apple fixes QuickTime security problems

Apple Inc. has issued a security patch that addresses eleven security vulnerabilities with its QuickTime multimedia playback software. Of the eleven security problems addressed, nine could potentially be used by a malicious user to run malicious code on a victim's computer. Eight of the vulnerabilities affect both Mac OS X and Windows versions of the software, while the remaining three are exclusive to Windows XP SP2 and Vista.

The worst flaws can be exploited with a specially crafted movie file, often delivered to unaware used through email messages. Due to the wide and cross-platform distribution of the QuickTime software, it is a constant target of crackers who use the discovered vulnerabilities to hijack machines.



In 2007, Apple fixed 34 QuickTime vulnerabilities, after fixing 28 QuickTime holes in 2006. So far this year, the tally is up to 16 specific QuickTime fixes. This latest fix comes shortly after security researchers managed to compromise a MacBook Air laptop using a zero-day vulnerability, taking advantage of a hole in Apple's Safari 3.1 Web browser.

---

Get regular news updates from AfterDawn.com by subscribing to our RSS feeds using the Subscribe button below. If you have been living in a cave for a few years now and don't know how to use RSS feeds, then Click Here to read a Guide on how to use RSS (and other) feeds.

Written by: James Delahunty @ 6 Apr 2008 22:02

• Previous article

• CyberLink launched PowerDVD 8

• Next article

• Carphone Warehouse will not comply with 'three strikes' copyright plan

• 11 comments

• sgriesch

  Anybody else dislike Quicktime as much as I do? For PC's, I can take it off of my start menu, play a file using Quicktime, and all of a sudden it's back on the start menu again. Now the story above tells me that I have to watch for security issues to boot. Great.

  6.4.2008 22:24 #1

• ZimHosein

  Wow, the "update" is only 57.0MB's!

  6.4.2008 22:54 #2

• cyprusrom

  QT, this must be really good stuff!
  All I read in the article, every other word is "vulnerability", "problem", "security issue", "hijack", "malicious", "cracked", "compromised". Seems pretty safe to me:~)!
  It's been uninstalled from my computer for over 2 years now...

  6.4.2008 23:53 #3

• ZoSoIV

  can you uninstall quicktime but keep ITunes ?
  
  i tryed it but ITunes didn't work

  7.4.2008 03:45 #4

• 21Q

  Who ever said you had to use iTunes either? There are plenty of alternatives. Unfortunately I am forced to use it as the iPhone isn't recognized as an ipod on these alternatives >_>

  7.4.2008 07:15 #5

• SuckRaven

  I use QuickTime Alternative. Lightweight, and plays all quicktime files. I believe current version is v2.5.1. Give it a try.
  
  There is also Real Alternative if you hate RealPlayer as much as I do.
  
  Cheers...
  
  Download link is here:
  
  http://www.free-codecs.com/download/quicktime_alternative.htm

  7.4.2008 09:28 #6

• A_Klingon

  Originally posted by sgriesch: Anybody else dislike Quicktime as much as I do? For PC's, I can take it off of my start menu, play a file using Quicktime, and all of a sudden it's back on the start menu again. Now the story above tells me that I have to watch for security issues to boot. Great.Yes, I'm certain I dislike it as much as you do. :-)
  
  Once you install it, you can never really get rid of the stoopid thing entirely, unless you do a total hard-drive wipe. Doesn't matter how many times you UNinstall it, or even manually delete the Quicktime folder from your Program Files folder; you'll still find residual QT files all over the place.
  
  It's a sprawling mass of over-bloated software, dumping various quicktime files all over your hard disc in places you never even knew were there. It infiltrates you Windows Registry too. Oh, yummy!
  
  Nah...... you can keep it.

  7.4.2008 18:49 #7

• ZoSoIV

  what other software can i use to transfer music to my 30 gig I-Pod then?
  
  I hate ITunes anyway and all i do with my I-Pod is transfer MY CDs that i buy only , I don't buy music from ITunes.
  
  I would even pay for software if it is good

  8.4.2008 01:19 #8

• susieqbbb

  HaHaHaHa the big reason for this patch to stop users of illegal serial numbers and hacks that unlocked there pro version $29.99 for free now after this patch all of the patches and serials are now deactivated.

  8.4.2008 03:03 #9

• zeroshame

  Originally posted by ZoSoIV: what other software can i use to transfer music to my 30 gig I-Pod then?
  
  I hate ITunes anyway and all i do with my I-Pod is transfer MY CDs that i buy only , I don't buy music from ITunes.
  
  I would even pay for software if it is goodWinamp can sync with your ipod and its free!

  8.4.2008 13:46 #10

• sgriesch

  Quote:Originally posted by sgriesch: Anybody else dislike Quicktime as much as I do? For PC's, I can take it off of my start menu, play a file using Quicktime, and all of a sudden it's back on the start menu again. Now the story above tells me that I have to watch for security issues to boot. Great.Yes, I'm certain I dislike it as much as you do. :-)
  
  Once you install it, you can never really get rid of the stoopid thing entirely, unless you do a total hard-drive wipe. Doesn't matter how many times you UNinstall it, or even manually delete the Quicktime folder from your Program Files folder; you'll still find residual QT files all over the place.
  
  It's a sprawling mass of over-bloated software, dumping various quicktime files all over your hard disc in places you never even knew were there. It infiltrates you Windows Registry too. Oh, yummy!
  
  Nah...... you can keep it.Glad to hear I'm not alone. I have to keep it as I do use I-Tunes to listen to music. I have a 40GB I-Pod that I can't load up otherwise. I-Tunes does at least recognize my Media Server, which is better than some MP3 programs I have used.

  8.4.2008 23:38 #11