Apple QuickTime update lances multiple bugs
Switch to manual
Posted in Software & Security, 6th March 2007 12:43 GMT
Free whitepaper – Driving Situational Awareness:
Apple has released an updated version of its popular QuickTime media playback software that fixes eight security vulnerabilities.
QuickTime 7.1.5, which also contains a number of bug fixes, guards against exploits that might be as straightforward as tricking users into opening maliciously constructed media files. The flaws affect both Windows and Mac OS X versions of QuickTime. Successful exploitation would allow hackers to take control of vulnerable systems.
Normally, Apple does a good job at automatically updating its QuickTime software - providing users have selected its auto-update function - but the SANS Institute reports that the updater tool that shipped with older versions of QuickTime doesn't apply to this particular patch, which security watchers rate as critical. Users are advised to install the update manually.
The vulnerabilities were variously discovered by security staff at McAfee's Avert Labs, iDefense and independent researchers. More detail on the flaws can be found in Apple's security advisory here. ®
Assuring application service quality
Transforming IT culture
Ensuring service assurance in the new normal
Reshaping IT
