Apple patches two QuickTime flaws

gallery

Apple has rushed out a couple of patches against exploits that could allow hackers to gain access to both Mac OS X and Windows-based computers.

A flaw in the company's QuickTime application's handling of JavaScript applets could allow remote code execution by criminals.

"By enticing a user to visit a webpage containing a maliciously crafted Java applet, an attacker can trigger the issue which may lead to arbitrary code execution," according to a statement released by the company.

Another vulnerability in the software could result in a web browser's memory to be read by a Java applet. Apple warned users to clear their browser's cache before any untrusted applet was run.

Windows users can find updates to fix the two flaws from Apple's support website. Mac users can go through the Software Update component to patch up their systems.

As reported by IT PRO in March, An earlier flaw in Apple's QuickTime file format could allow spyware to be downloaded to collect personal information from users.

Email to a friend

Print this page