| View previous topic :: View next topic |
| Author |
Message |
admin Site Admin

Joined: 21 Jan 2005 Posts: 2047 Location: U.S.A
|
Posted: Tue Jan 23, 2007 5:35 pm Post subject: Apple Releases Security Update 2007-001 |
|
|
Apple Releases Security Update 2007-001
Tuesday, January 23, 2007
Posted by: Glenn
Apple has released Security Update 2007-001 via Mac OS X's Software Update utility and on the Web. The update specifically addresses a possible security flaw in QuickTime. According to the company, "A buffer overflow exists in QuickTime's handling of RTSP URLs. By enticing a user to access a maliciously-crafted RTSP URL, an attacker can trigger the buffer overflow, which may lead to arbitrary code execution. A QTL file that triggers this issue has been published on the Month of Apple Bugs web site (MOAB-01-01-2007). This update addresses the issue by performing additional validation of RTSP URLs." The update weighs in at 4.9MB.
http://www.123macmini.com/news/story/596.html |
|
| Back to top |
|
 |
RickB Member

Joined: 16 Oct 2006 Posts: 77 Location: Vegas
|
Posted: Tue Jan 23, 2007 11:50 pm Post subject: |
|
|
It seems like there have been a lot of updates correcting security issues with QuickTime lately.  |
|
| Back to top |
|
 |
Futa_Mill Veteran Member


Joined: 17 Jul 2006 Posts: 760 Location: Winnipeg MB,Canada
|
Posted: Wed Jan 24, 2007 12:28 am Post subject: |
|
|
I installed it and had no problems. _________________
 |
|
| Back to top |
|
 |
TonyMontana Veteran Member


Joined: 24 Jul 2006 Posts: 1945 Location: Missoula, MT
|
Posted: Wed Jan 24, 2007 12:45 am Post subject: |
|
|
Big thanks to the jokers @ M.O.A.B for pointing this flaw out. Even BIGGER thanks to Apple for addressing these "bugs" so quickly.  _________________ MacMini 2.0GHz C2D (2009)
MacMini 2.16GHz Intel Core Duo
Dell Mini 10v *OSX 10.6.4* |
|
| Back to top |
|
 |
g5g5 Veteran Member


Joined: 25 Jan 2005 Posts: 2716 Location: Virginia
|
Posted: Wed Jan 24, 2007 3:54 pm Post subject: |
|
|
| TonyMontana wrote: | Big thanks to the jokers @ M.O.A.B for pointing this flaw out. Even BIGGER thanks to Apple for addressing these "bugs" so quickly.  |
Definitely! It's good to see Apple is responding to MoAB. _________________ 1.25GHz Mac Mini / 1.8GHz iMac G5 / 2.0GHz C2D Mac mini (2009)
4GB iPod mini / 2G iPod shuffle / 16GB iPhone 3G
Apple TV 2
iLife's a Bitch! |
|
| Back to top |
|
 |
SOCOMRAIDER Veteran Member


Joined: 26 Oct 2005 Posts: 2869 Location: Minneapolis
|
Posted: Thu Jan 25, 2007 1:21 am Post subject: |
|
|
There was an article with someone saying it was astonishing how slow the response from Apple was, to fix some of these flaws. I guess that person forgot about Microsoft when stating that comment. _________________
 |
|
| Back to top |
|
 |
blazer Veteran Member


Joined: 23 Mar 2005 Posts: 1061 Location: San Ramon, California
|
Posted: Thu Jan 25, 2007 2:29 am Post subject: |
|
|
| SOCOMRAIDER wrote: | | There was an article with someone saying it was astonishing how slow the response from Apple was, to fix some of these flaws. |
The original MOAB report for this bug is dated 01-01-2007. I would say 22 days is pretty good. I think these people should give Apple a little bit of a break. They also had Macworld and the iPhone to worry about earlier this month. I mean that's the important stuff.  _________________ 1.42GHz Mac mini
2.0GHz Core 2 Duo Mac mini
2.0GHz Core 2 Duo Mac mini (2009)
2.5GHz Core i5 Mac mini (2011)
24" Dell LCD & 42" Sharp TV
EyeTV 250 Plus
1G, 2G, 3G, 4G and 5G iPod nanos
16GB 3G iPhone |
|
| Back to top |
|
 |
|