Apple patches QuickTime buffer overflow
By Simon Aughton,
Apple has released a security update that addresses a vulnerability in QuickTime where visiting malicious websites may lead to arbitrary code execution.
The flaw is caused by a buffer overflow in QuickTime's handling of RTSP URLs. By enticing a user to access a maliciously-crafted RTSP URL, an attacker can trigger the buffer overflow, which may lead to the execution of code.
The vulnerability was discovered by the Month of Apple Bugs project, which has published a QTL file that triggers the flaw. The update addresses the issue by performing additional validation of RTSP URLs.
Security Update 2007-001 is available for Mac OS X 10.3.9 Panther and Mac OS X 104.8 systems from apple.com/support/downloads. For more information see info.apple.com/kbnum/n304989.
advertisement
Latest Internet Features
The continued curse of cybersquatting
For some, it’s a problem confined to the early days of the Internet. But current figures suggest that the cybersquatting problem is, if anything, growing.
- Where next for Microsoft, Yahoo and Google?
- Top 10 mobile features of 2009
- Top 10 security predictions for 2009
- Top 10 reviews of 2008
- The year in IT news
- Top 10 security stories of 2008
- Top 10 business phones of 2008
- 15 tech charities that need your help
- PCI's Bob Russo: Data loss hurts brand more than a fine
Latest Internet Reviews
Fujitsu Siemens FibreCAT SX80 iSCSI
Rating: 
advertisement
Latest News Videos in Internet
Video: Q&A with Easynet Connect's Chris Stening
PlayIT PRO spoke to Chris Stening, managing director of Easynet’s SME division, about whether ISPs are giving businesses the service they deserve.
White papers
Want more background on today's hottest IT trends?
Visit IT PRO's white paper library for more on virtualisation, encryption and other topics.
Register for IT PRO
You'll get exclusive member benefits including free white papers, downloads, Webinars and weekly newsletters full of the latest IT PRO news, reviews, insight and expertise.
Social Bookmark this article: What is this?