Home Phone and Internet $60/mo
December 3, 2007 8:14 AM PST
Apple QuickTime exploit in the wild
- Related Stories
-
Cybercrooks add QuickTime, WinZip flaws to arsenal
May 10, 2007 -
Apple plugs QuickTime zero-day flaw
May 1, 2007 - Related Blogs
-
Apple QuickTime exploit published
November 26, 2007
Researcher Joji Hamada wrote in Symantec's Security Response Weblog on Saturday that the company had seen an active exploit for the vulnerability in Apple's media-streaming program that could lead to users downloading Trojan software.
Hamada said the exploit code was found on a compromised porn site that redirects users to a site hosting malicious software called "Downloader." Downloader is a Trojan that causes compromised machines to download other malicious software from the Internet. Symantec rates Downloader as "very low" risk.
No patch is currently available for the vulnerability, which affects version 7.x, and which lies in a boundary error when QuickTime processes Real Time Streaming Protocol (RTSP) replies.
Symantec is advising concerned IT professionals to run Web browsers at the highest security settings possible, disable Apple QuickTime as a registered RTSP protocol handler, and filter outgoing activity over common RTSP ports, including TCP port 554 and UDP ports 6970-6999.
Proof of concept code was published when the vulnerability was disclosed by security research company Secunia last week.
Tom Espiner of ZDNet UK reported from London.
See more CNET content tagged:
Apple QuickTime,
wild,
Symantec Corp.,
vulnerability,
Apple Computer
porn sites in the first place. Employees shouldn't be getting their
jollies at work. Sounds like a good way to get yourself fired if
you're the employee that came across it.
media delivery. Quicktime, Real and even MS Windows Media
Player uses those ports.
It is amazing that Apple didn't come up with a hotfix yet.
Quicktime installations hard earned over years will be zeroed once
again. In fact, it effects iTunes too.
on security issues?
ROFLMAO!!!! :-D