Apple fixes year-old QuickTime flaw

Iria · Oct 5, 2007, 04:59 AM

Source: InfoWorld
_________
Apple updated the Windows version of QuickTime today to quash a 13-month-old bug that critics say it overlooked when it patched the media player in March.

The update fixes a flaw in QuickTime for Windows XP and Vista first reported in September 2006 by U.K. researcher Petko Petkov. Last month, Petkov posted proof-of-concept code for the vulnerability after claiming Apple had not acknowledged his messages. Several samples posted to the Web leveraged both the QuickTime bug and one in the open-source Firefox browser to create a drive-by attack capable of invisibly hijacking a PC.

Oct 5, 2007, 04:59 AM	#1
Iria DriverHeaven Extreme Member Join Date: Apr 2004 Posts: 7,275 Rep Power: 89	Apple fixes year-old QuickTime flaw Source: InfoWorld _________ Apple updated the Windows version of QuickTime today to quash a 13-month-old bug that critics say it overlooked when it patched the media player in March. The update fixes a flaw in QuickTime for Windows XP and Vista first reported in September 2006 by U.K. researcher Petko Petkov. Last month, Petkov posted proof-of-concept code for the vulnerability after claiming Apple had not acknowledged his messages. Several samples posted to the Web leveraged both the QuickTime bug and one in the open-source Firefox browser to create a drive-by attack capable of invisibly hijacking a PC.