RSS

Quicktime has buffer overflow problems, but it seems to be Windows only

Fri, Jan 11, 2008

Mac News

    By: Joshua Schnell

Everyone and their brother is reporting right now that a vulnerability in Quicktime has surfaced and by association everyone is assuming OS X is not as secure as everyone claims it is. The problem, according to computerworld website seems to be a problem with accessing real-time streaming protocol, and “The player then automatically tries to open an HTTP connection on Port 80. An attacker can exploit the weakness by duping a user into visiting a malicious site that includes an rtsp:// link; when QuickTime fails to connect, it would automatically seek out an HTTP server on the same system.” Seems like a pretty scary concept that should be addressed immediately. But, computerworld points out that “it appears that only the Windows version of QuickTime is vulnerable; the Mac OS X edition apparently doesn’t exhibit the same dangerous behavior”. How funny is that. Not only does Apple claim to be more secure than windows, but it’s also adding to the vulnerabilities of windows… now that is genius, no matter how unintentional it is!

Share and Enjoy:
  • Digg
  • del.icio.us
  • Facebook
  • Reddit
  • StumbleUpon
  • Technorati
  • TwitThis
  • BlogMemes
  • Fark
  • Google
  • Live
  • Mixx
  • NewsVine
  • Pownce
  • Propeller
  • Slashdot

Related Posts

, , , ,

This post was written by:

Joshua Schnell - who has written 266 posts on Macgasm.

Well, I'm pretty much addicted to all things Apple, and Twitter. That's probably all you really need to know. If I'm not posting here, I'm probably wasting time on Twitter.

Contact the author

Trackbacks

close Reblog this comment
blog comments powered by Disqus