Giveaway of the Day Forums

1. 

   mikiem2
   Moderator

   http://www.neowin.net/news/quicktime-777
   http://www.apple.com/quicktime/what-is/

   What's New in QuickTime 7.7.7:

   QuickTime 7.7.7 improves security and is recommended for all QuickTime 7 users on Windows. For information on the security content of this update, please visit this website.
   QuickTime for Java and QuickTime PictureViewer are no longer installed by default. They are removed if you have a previous version of QuickTime on your PC. If you still need these legacy features, you can add them back using the new custom setup option in the installer.

   Posted 9 years ago #
2. 

   mikiem2
   Moderator

   "Patched Apple QuickTime Vulnerability Details Disclosed"
   https://threatpost.com/patched-apple-quicktime-vulnerability-details-disclosed/113570

   On Tuesday, Apple patched a use-after-free vulnerability in its QuickTime media player that could have guaranteed an attacker remote code execution on the underlying system running the program.

   Researchers at Cisco, shortly after the patch was released, disclosed technical details on the vulnerability. Cisco’s Talos team reported the bug to Apple on May 8.

   Craig Williams, security outreach manager at Cisco, said the vulnerability was discovered internally by the company’s Talos Vulnerability Research and Development Team and has not been exploited publicly.

   “You would see this type of vulnerability used by attackers in spam campaigns, phishing or malvertising campaigns,” Williams said. “Any way where a user can be tricked into clicking on a link is how the vulnerability could be exploited.”

   Posted 9 years ago #

RSS feed for this topic

Reply

You must log in to post.