| ActiveMac | Anonymous | Create a User | Reviews | News | Forums | Advertise |
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
ActiveMac |
|
Articles |
|
Forums |
|
Links |
|
News |
|
News Search |
|
Reviews |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
DVD |
|
ActiveHardware |
|
Xbox |
|
MaINTosh |
|
News Search |
|
|
|
|
|
|
|
ANet Chats |
|
The Lobby |
|
Special Events Room |
|
Developer's Lounge |
|
XBox Chat |
|
|
|
|
|
|
|
FAQ's |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows "Whistler" XP |
|
Windows CE |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
TopTechTips |
|
Registry Tips |
|
Windows 95/98 |
|
Windows 2000 |
|
Internet Explorer 4 |
|
Internet Explorer 5 |
|
Windows NT Tips |
|
Program Tips |
|
Easter Eggs |
|
Hardware |
|
DVD |
|
|
|
|
|
|
|
Latest Reviews |
|
Applications |
|
Microsoft Windows XP Professional |
|
Norton SystemWorks 2002 |
|
|
|
Hardware |
|
Intel Personal Audio Player 3000 |
|
Microsoft Wireless IntelliMouse Explorer |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Affiliates |
|
ANet Forums |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
|
Links |
|
Member Pages |
|
Site Search |
|
Awards |
|
|
|
|
|
|
|
Credits |
 |
New QuickTime bug opens XP, Vista to attack | |
|
||
| Time: 10:39 EST/15:39 GMT | News Source: ComputerWorld | Posted By: Jonathan Tigner | ||
|
Security researchers warn that attack code targeting an unpatched bug in Apple Inc.'s QuickTime has gone public, and added that in-the-wild attacks against systems running Windows XP and Vista are probably not far behind. There was no word as of Sunday whether the Mac OS X versions of the media player are also vulnerable. The critical bug in QuickTime 7.2 and 7.3 (and perhaps earlier editions as well) is in the player's handling of the Real Time Streaming Protocol (RTSP), a audio/video streaming standard. According to alerts posted by Symantec Corp. and the U.S. Computer Emergency Readiness Team (US-CERT), attackers can exploit the flaw by duping users into visiting malicious or compromised Web sites hosting specially-crafted streaming content, or by convincing them to open a rigged QTL file attached to an e-mail message. | ||
|
Write Comment
Return to News |
Displaying 1 through 25 of 217 Last | Next |
The time now is
10:41:55 PM
ET.
Any comment problems? E-mail us |
| #1 By 28801 (65.90.202.10) at 11/26/2007 11:06:00 AM |
| I guarantee someone will find a way to blame MS for this. |
| #2 By 23275 (71.12.191.230) at 11/26/2007 12:44:24 PM |
|
They'll spin it for sure - and just as their code seems to have done, they'll ignore how secure Vista is.
I just don't like the new Apple. I worked in its new OS last night and the interface is just nasty - tears badly and seems very crude when compared to the visual experience on Vista. This was a hog of a dual processor machine with one of Apple's better GPU's and the experience was choppy at best. I left it wondering who in the world actually reviews such systems and more... have they ever run even a decent Vista PC, or laptop? The Apple OS just isn't "smooth" and smooth matters a great deal in terms of experiene. |
| #3 By 29967 (72.221.79.220) at 11/26/2007 3:46:34 PM |
| F**King apple and their "bug free" software.... |
| #4 By 82766 (202.154.80.84) at 11/26/2007 7:50:49 PM |
|
#1 - What I find baffling is the by-line on this article...
Apple forgot to turn on Vista security feature, claims researcher Now if that is the case then why does the same hole exist on XP??? hmmm, me thinks article writer *IS* trying to blame Microsoft in a very backward way... sigh... |
| #5 By 12071 (203.185.215.144) at 11/26/2007 9:32:45 PM |
|
#4 No-one is blaming Microsoft, you don't need to jump to their defense just yet... in fact, everyone is pointing at Apple saying that had they utilized ASLR, the exploit would have been a lot harder to exploit on Vista.
"A gaffe by Apple's developers, however, makes attack easier on Vista, said InTeL, who claimed that the QuickTimePlayer binary does not have Address Space Layout Randomization (ASLR) enabled." "Apple's forgetfulness prompted Symantec analyst Anthony Roe to note: "This makes reliable exploitation of the vulnerability a lot easier."" |
|
Write Comment
Return to News |
Displaying 1 through 25 of 217 Last | Next |
The time now is
10:41:55 PM
ET.
Any comment problems? E-mail us |
