Tuesday, December 11, 2007

New security hole in Apple QuickTime Player

Gadget News - Wednesday December 12, 2007

New security hole in Apple QuickTime Player

Cupertino, California (dpa) - New vulnerabilities have surfaced in Apple's QuickTime multimedia player, experts are reporting.

Seven security holes in all could allow attackers off the internet to execute arbitrary commands with the privileges of a registered user.

The German Federal Agency for Security in Information Technology (BSI) in Bonn is publicizing the hole. If the user is logged in to an account with administrator rights, then the attackers can gain complete control of the PC.

To exploit the hole, users must visit a specially-prepared internet site or open a manipulated file. The Microsoft Windows and Apple Mac OS X operation systems are both affected if they are running QuickTime up to version 7.3, the BSI reports. The agency is recommending that all users download the update released by Apple to close the holes. That can be performed via the integrated update function or manually at http://www.apple.com

Bangkok Post

No comments: