Symantec: QuickTime Flaw Poses Security Threat || The Mac Observer

Skip navigational links

Choose text size:

DealsOnTheWeb Daily Deal: It's Friday, time for the Amazon Friday Sale!

Symantec: QuickTime Flaw Poses Security Threat

by , 8:50 AM EST, November 26th, 2007

The security and virus protection software company Symantec is warning that Apple's QuickTime Player application may be open to malicious attacks. According to the company, both QuickTime 7.2 and QuickTime 7.3 are vulnerable to attacks that could lead to denial of service conditions or the execution of unauthorized code on the user's PC.

Symantec claims the threat stems from the way QuickTime Player handles RTSP Response headers. A specially-crafted header could create a buffer overflow because QuickTime apparently does not properly bounds-check incoming data.

The company did not state if this is a Windows-only problem, or if Mac OS X users are at risk, too. Since an attacker could use this flaw to remotely install applications without user consent, however, this is most likely a bigger threat to Windows users because Microsoft's operating systems are routinely the targets of malware and spyware attacks.

Observer Comments

Show: Subjects Only | Full Comments

Close Name:geoduck Posts: 1921 Joined: 30 Dec 2003
Mon Nov 26, 2007 12:51 pm Subject:

Maybe QuickTime is vulnerable but I am always suspicious of warnings like this from companies that are in the business of selling security. This is especially true when they use words like 'may be open', 'could lead to', 'could create', etc. etc.

Reply | Quote

Close Name:Sir Harry Flashman Posts: 792 Joined: 08 Feb 2007
Mon Nov 26, 2007 12:56 pm Subject: Windows only

I read over on CNET that it is a Windows only exploit.

Speaking of computer security. Did you all catch 60 Minutes last night? Hackers got into the retailer TJX computer system via poor wireless security, the stores were using WEP. Millions of credit cards and other ID info was stolen, the hackers had access for over a year.

Reply | Quote

Comment on this Article

Guest Posts Visible. Hide Them.
Back to top Page 1 of 1

You cannot edit your comments. You cannot delete your comments.

Recent Headlines - Updated Saturday, November 29th, 2008

Sat., 9:00 PM: Podcast - Apple Weekly Report #135: Apple Lawsuits, Banned iPhone Ad, Green MacBook Ad

Fri., 12:45 PM: Podcast - Mac Geek Gab #178: Batch Permission Changes, Encrypting Follow-up, Re-Enabling AirPort, and GigE speeds

Thu., 1:30 PM: iPO Review - Scosche kickBACK iPhone case
7:00 AM: Happy Thanksgiving from TMO!

Wed., 6:00 PM: TMO Appearances - Nancy Gravley Joins MacJury Gift Guide
5:15 PM: TMO Visits The Bay, a Premium Apple Reseller in New Zealand
3:25 PM: iPO Oh the Games You'll Play - iPhone: The Wii of Handheld Gaming Devices?
2:15 PM: Sonnet Releases Simply Fast FireWire 800 to 400 Adapter
1:10 PM: Mac Gaming News - Disney Plans 1st Annual PotC Online Thanksgiving Event
12:05 PM: iPodObserver - UK Shuts Down iPhone 3G Ad
11:15 AM: TMO Appearances - Jeff Gamet on MacJury Gift Guide
10:30 AM: TMO Contest - TMO Announces Macworld Expo Pass Winners
9:50 AM: PhotoCopy 1.1 Adds iPhoto Event Support
9:15 AM: Acclivity Buys MYOB US
8:30 AM: Review - Bento 2 Holiday Pack
7:50 AM: Microsoft Offers Black Friday Office Discount
7:30 AM: iPO Quick Tip - iPhone: Google Street View

The Mac Observer Reader Specials

Download Typestyler, still the Ultimate Styling Tool for Internet, Print and Video Graphics. Works great in Classic with a Native OS X Version on the way. Free Tryout: www.typestyler.com
New iMac 800Mhz Memory 4GB $54. New MacBook & MacBook Pro DDR3 PC8500 4GB Kit $116. MacBook/MacBook Pro / MacMini / iMac Intel Core2 DUO DDR2 667Mhz 4GB Kit $58, 3GB Kit $44, 2GB Kit $30. Click to Maximize your Macs...
Mac observers can now play Party Poker for Mac as well as Mac casino games by going to MacPokerOnline.com.
RamJet Memory: Mac Pro FB-DIMMs: 2Gig kit $95, 4Gig Kit $179, 8Gig Kit $355! MacBook 2Gig Kit $78, 4Gig Kit $149! Click here
For the latest Apple products use Ciao a comparison website to find laptops like MacBook Air. Then find the best prices on MP3 players and use our comparison tool to evaluate cell phones.
Laptop Hardware Provided by TechRestore - Overnight Mac & iPod Repairs.

Apple Stock Quote

AAPL: $91.41. Change Today: -4.49.
(Prices delayed up to 20 minutes.)
Discuss in our Apple Finance Board

Hot Topics

What's the buzz? These articles have TMO readers talking.

FaceBook Wins $873 Million Judgement Against Spammer - (24 Comments)
Microsoft Offers Black Friday Office Discount - (14 Comments)
Apple's Bad Habit of Competing With its Channel Partners - (7 Comments)
Happy Thanksgiving from TMO! - (7 Comments)
Sonnet Releases Simply Fast FireWire 800 to 400 Adapter - (3 Comments)
Adobe Camera Raw 5.2 Adds New Camera Support - (3 Comments)

Top Deals From DealsOnTheWeb

© The Mac Observer, Inc. -- All rights reserved. All information presented on this site is copyrighted by The Mac Observer, Inc. except where otherwise noted. No portion of this site may be copied without express written consent. Other sites are invited to link to any aspect of this site provided that all content is presented in its original form and is not placed within another frame. The Mac Observer is an independent publication and has not been authorized, sponsored, or otherwise approved by Apple, Inc.