Peaches Posted July 28, 2010 Report Share Posted July 28, 2010 27 July 2010, 18:24 Critical vulnerability in QuickTime 7.6.6 According to security services provider Secunia, the latest version of Apple's QuickTime 7 media player for Windows contains a critical vulnerability that could be exploited by an attacker to compromise a user's system. The security specialist says that the issue is caused by a boundary error in the streaming component used by QuickTime and can be used to initiate a stack-based buffer overflow. For an attack to be successful, a victim must first open a specially crafted web page. QuickTime 7.6.6 (build 1671), released at the end of March, 2010, is the latest version of the 7.x branch. It was released to close a total of 16 critical vulnerabilities, all of which could be used by an attacker to inject and execute arbitrary code with the users current privileges. It's currently unclear if previous versions of QuickTime for Windows or Mac OS X are affected. Apple has yet to respond to respond to the advisory. http://www.h-online.com/security/news/item/Critical-vulnerability-in-QuickTime-7-6-6-1046499.html Quote Link to post Share on other sites
Recommended Posts
Join the conversation
You can post now and register later. If you have an account, sign in now to post with your account.