 |
 |
| ActiveWin | Anonymous | Create a User | Reviews | News | Forums | Advertise | VBA in Excel | Users Online: 0 |
|
|
|
|
|
User Controls |
|
New User |
|
Login |
|
Edit/View My Profile |
|
|
|
|
|
|
|
Active Network |
|
ActiveMac |
|
ActiveWin |
|
ActiveXbox |
|
DirectX |
|
Downloads |
|
FAQs |
|
Interviews |
|
MS Games & Hardware |
|
Reviews |
|
Rocky Bytes |
|
Support Center |
|
TopTechTips |
|
Windows 2000 |
|
Windows Me |
|
Windows Server 2003 |
|
Windows Vista |
|
Windows XP |
|
|
|
|
|
|
|
News Centers |
|
Windows/Microsoft |
|
Apple/Mac |
|
Xbox/Xbox 360 |
|
News Search |
|
XML/RSS Newsfeeds |
|
Pocket PC Site |
|
|
|
|
|
|
|
FAQ's |
|
Windows Vista |
|
Windows 98/98 SE |
|
Windows 2000 |
|
Windows Me |
|
Windows Server 2003 |
|
Windows XP |
|
Windows 7 |
|
Windows 8 |
|
Internet Explorer 6 |
|
Internet Explorer 5 |
|
Xbox 360 |
|
Xbox |
|
DirectX |
|
DVD's |
|
|
|
|
|
|
|
Latest Reviews |
|
Xbox/Games |
|
Fable 2 |
|
|
|
Applications |
|
Windows Server 2008 R2 |
|
Windows 7 |
|
Adobe CS5 Master Collection |
|
|
|
Hardware |
|
Microsoft Express Mouse |
|
|
|
|
|
|
|
Latest Interviews |
|
Mike Swanson |
|
|
|
|
|
|
|
Site News/Info |
|
About This Site |
|
Advertise |
|
Affiliates |
|
Contact Us |
|
Default Home Page |
|
Link To Us |
 |
New QuickTime bug opens XP, Vista to attack | |
|
||
| Time: 10:39 EST/15:39 GMT | News Source: ComputerWorld | Posted By: Jonathan Tigner | ||
|
Security researchers warn that attack code targeting an unpatched bug in Apple Inc.'s QuickTime has gone public, and added that in-the-wild attacks against systems running Windows XP and Vista are probably not far behind. There was no word as of Sunday whether the Mac OS X versions of the media player are also vulnerable. The critical bug in QuickTime 7.2 and 7.3 (and perhaps earlier editions as well) is in the player's handling of the Real Time Streaming Protocol (RTSP), a audio/video streaming standard. According to alerts posted by Symantec Corp. and the U.S. Computer Emergency Readiness Team (US-CERT), attackers can exploit the flaw by duping users into visiting malicious or compromised Web sites hosting specially-crafted streaming content, or by convincing them to open a rigged QTL file attached to an e-mail message. |
||
|
Read Only Comments Return to News |
Displaying Comments 1 through 5 of 5 |
This is an archived static copy of ActiveWin.com. |
| #1 By 28801 (65.90.202.10) at Monday, November 26, 2007 11:06:00 AM |
| I guarantee someone will find a way to blame MS for this. |
| #2 By 23275 (71.12.191.230) at Monday, November 26, 2007 12:44:24 PM |
|
They'll spin it for sure - and just as their code seems to have done, they'll ignore how secure Vista is.
I just don't like the new Apple. I worked in its new OS last night and the interface is just nasty - tears badly and seems very crude when compared to the visual experience on Vista. This was a hog of a dual processor machine with one of Apple's better GPU's and the experience was choppy at best. I left it wondering who in the world actually reviews such systems and more... have they ever run even a decent Vista PC, or laptop? The Apple OS just isn't "smooth" and smooth matters a great deal in terms of experiene. |
| #3 By 29967 (72.221.79.220) at Monday, November 26, 2007 03:46:34 PM |
| F**King apple and their "bug free" software.... |
| #4 By 82766 (202.154.80.84) at Monday, November 26, 2007 07:50:49 PM |
|
#1 - What I find baffling is the by-line on this article...
Apple forgot to turn on Vista security feature, claims researcher Now if that is the case then why does the same hole exist on XP??? hmmm, me thinks article writer *IS* trying to blame Microsoft in a very backward way... sigh... |
| #5 By 12071 (203.185.215.144) at Monday, November 26, 2007 09:32:45 PM |
|
#4 No-one is blaming Microsoft, you don't need to jump to their defense just yet... in fact, everyone is pointing at Apple saying that had they utilized ASLR, the exploit would have been a lot harder to exploit on Vista.
"A gaffe by Apple's developers, however, makes attack easier on Vista, said InTeL, who claimed that the QuickTimePlayer binary does not have Address Space Layout Randomization (ASLR) enabled." "Apple's forgetfulness prompted Symantec analyst Anthony Roe to note: "This makes reliable exploitation of the vulnerability a lot easier."" |
