« Digg That HD-DVD Encryption Key, Baby
Negotiations Under Way on Revised Iraq War Funding Bill »

Apple Quicktime Update 7.1.6 Fixes Security Flaw

Published by William Fletcher May 2nd, 2007 in Internet.

Apple released a QuickTime update to patch a security flaw<br> Apple has released Quicktime 7.1.6, an update that fixes a security flaw that was used to hack a Macbook Pro at the hack-a-Mac contest at CanSecWest.   

 Details of the update from Apple’s website follow.

QuickTime 7.1.6 Update

CVE-ID: CVE-2007-2175

Available for: Mac OS X v10.3.9, Mac OS X v10.4.9, Windows XP SP2, Windows 2000 SP4

Impact: Visiting a malicious website may lead to arbitrary code execution

Description: An implementation issue exists in QuickTime for Java, which may allow reading or writing out of the bounds of the allocated heap. By enticing a user to visit a web page containing a maliciously-crafted Java applet, an attacker can trigger the issue which may lead to arbitrary code execution. This update addresses the issue by performing additional bounds checking when creating QTPointerRef objects. Credit to Dino Dai Zovi working with TippingPoint and the Zero Day Initiative for reporting this issue.

The update can be downloaded .

0 Responses to “Apple Quicktime Update 7.1.6 Fixes Security Flaw”

Trackback Address

  2. No Comments

Leave a Reply

« Digg That HD-DVD Encryption Key, Baby
Negotiations Under Way on Revised Iraq War Funding Bill »

Announcements


We're going to be adding a few more talented writers to the Portable Planet menagerie within the next few months.

Also, we haven't forgotten about the layout change; we have an unconfirmed fear that our designer is trapped in an oubliette somewhere between the border of Paraguay and Bolivia. Either that, or he's lazy.