Apple plugs zero-day QuickTime flaw

TalkBack 11 of 30:

Next »

« Previous

• Thread View
• Flat View

Did you even read it?

Or are you just spreading FUD?

Security Update 2007-001

QuickTime

CVE-ID: CVE-2007-0015

Available for: QuickTime 7.1.3 on Mac OS X v10.3.9, Mac OS X Server v10.3.9, Mac
OS X v10.4.8, Mac OS X Server v10.4.8, Windows XP/2000

Impact: Visiting malicious websites may lead to arbitrary code execution

Description: A buffer overflow exists in QuickTime's handling of RTSP URLs. By
enticing a user to access a maliciously-crafted RTSP URL, an attacker can trigger
the buffer overflow, which may lead to arbitrary code execution. A QTL file
that triggers this issue has been published on the Month of Apple Bugs web site
(MOAB-01-01-2007). This update addresses the issue by performing
additional validation of RTSP URLs.

Posted by: Rick_K   Posted on: 01/24/07 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Building the Virtualized Enterprise with VMware Iinfrastructure VMware VMware virtualization software has been adopted by over 120,000 enterprise ... Download Now
• Open Standards Technologies Provide the Ingredients for Delivering Security Across the Papa Gino's Enterprise Dell Papa Gino's Holdings Corporation founded by the entrepreneur operates one ... Download Now
• Five Steps to Determine When to Virtualize YourServers VMware Server virtualization isn't just for big companies. Entry-level ... Download Now