Apple - New Apple QuickTime Flaw Discovered - eWeek Security Watch | eWeek

New Apple QuickTime Flaw Discovered

Écrit par
Brian Prince
Brian Prince
Aug 31, 2010
1 minute read
eWeek Le contenu et les recommandations de produits sont indépendants de la rédaction. Nous pouvons gagner de l'argent lorsque vous cliquez sur des liens vers nos partenaires. En savoir plus

A security researcher has uncovered a new vulnerability in Apple QuickTime that can be used to bypass some security protections in Microsoft Windows.

According to Wintercore Security’s Ruben Santamarta, the bug seems to be the result of a parameter from an older version of QuickTime being mistakenly left in the code. The vulnerability can be exploited remotely on machines running Internet Explorer (IE) on Windows XP, Vista or Windows 7 with QuickTime versions 6x or 7x.

Santamarta’s findings can be read here.

“The exploit defeats ASLR+DEP and has been successfully tested on W7, Vista and XP,” he blogged. “A metasploit module should be available soon since I sent the exploit details … some days before releasing this advisory.”

Symantec advised that users worried about the issue can disable the QuickTime plug-in until a patch is available.

eWeek Logo

eWeek has the latest technology news and analysis, buying guides, and product reviews for IT professionals and technology buyers. The site's focus is on innovative solutions and covering in-depth technical content. eWeek stays on the cutting edge of technology news and IT trends through interviews and expert analysis. Gain insight from top innovators and thought leaders in the fields of IT, business, enterprise software, startups, and more.

Propriété de TechnologyAdvice. © 2026 TechnologyAdvice. Tous droits réservés

Divulgation publicitaire : Certains des produits qui apparaissent sur ce site proviennent d'entreprises dont TechnologyAdvice reçoit une compensation. Cette compensation peut influencer la façon dont les produits apparaissent sur ce site, notamment l'ordre dans lequel ils apparaissent. TechnologyAdvice n'inclut pas toutes les entreprises ou tous les types de produits disponibles sur le marché.