Apple criticized for security advisories

TalkBack 39 of 91:

Next »

« Previous

• Thread View
• Flat View

Quicktime flaw

From eEye - http://www.eeye.com/html/Research/Advisories/AD20040502.html

"The vulnerability allows a remote attacker to reliably overwrite heap memory with user-controlled data and execute arbitrary code in the context of the user who executed the player or application hosting the QuickTime plug-in."

Ok, so perhaps it won't run as root. Still, how would you feel having all the files you do have permissions for deleted? Does your user have permissions to launch an email application? Doesn't mean a worm couldn't be written that would then start spewing emails with invected .mov files from your machine to everyone in your address book, which I'm assuming your account would have permission to read...

Regarding "OS X flaw may leave Macs open to virus attacks" and you're "The third headline is misleading becasue there ARE NO viruses for Mac OS X so how is the headline the truth?" is the word "may" not in your dictionary. Ok, so there aren't any viruses that exploit it yet. Doesn't mean there never will be. Get you head out of the sand and recognize security must be taken serious on all platforms.

Posted by: PA-ITGuy   Posted on: 05/05/04 You are currently: a Guest | Members login | Terms of Use

Alert moderator to an offensive message

Subscribe to this discussion via Email or RSS

SponsoredWhite Papers, Webcasts, and Downloads

• Three Steps You Need to Know to Stop Data Loss Varonis Sensitive data exposed to misuse or loss... it is the stuff of nightmares ... Download Now
• Virtualization: Architectural Considerations And Other Evaluation Criteria VMware Of the many approaches to x86 systems virtualization available in the ... Download Now
• Why Isn't Server Virtualization Saving Us More? A Few Small Changes May Dramatically Increase Your Efficiency VMware Companies have rapidly adopted server virtualization over the past few ... Download Now