p2pnet news | Security:- Secunia says there’s a(nother) extremely critical security hole in Apple QuickTime.

And there’s a working exploit publicly available, it says, going on:

“h07 has discovered a vulnerability in Apple QuickTime, which can be exploited by malicious people to compromise a user’s system.

“The vulnerability is caused due to a boundary error when processing RTSP replies and can be exploited to cause a stack-based buffer overflow via a specially crafted RTSP reply containing an overly long ‘Content-Type’ header.

Successful exploitation, “allows execution of arbitrary code and requires that the user is e.g. tricked into opening a malicious QTL file or visiting a malicious web site.”

It’s been confirmed in version 7.3 and, “Other versions may also be affected,” says the post.

At the beginning of the month, Apple’s then latest QuickTime release fixed “at least” seven major security vulnerabilities in earlier versions of QuickTime for Mac, Windows XP and Windows Vista.

What to do?

“Do not browse untrusted websites, follow untrusted links, nor open untrusted QTL files.”

Slashdot it!

Also See:
Secunia - Apple QuickTime RTSP “Content-Type” Header Buffer Overflow, November 26, 2007
seven major security vulnerabilities - 7 Apple QuickTime security fixes, November 6, 2007

---

Use free p2pnet newsfeeds for your site. It’s really easy!
Subscribe to p2pnet.net | | rss feed: http://p2pnet.net/p2p.rss | | Mobile - http://p2pnet.net/index-wml.php

---

Net access blocked by government restrictions? Use Psiphon from the Citizen Lab at the University of Toronto. Go here for the download, and here for details. Click here or here to learn how to by-pass censorship in your area.

This entry was posted on Thursday, November 29th, 2007 at 11:18 am and is filed under Security. You can follow any responses to this entry through the RSS 2.0 feed. You can skip to the end and leave a response. Pinging is currently not allowed.

HOME

Viewed 5319 times