Zero-day exploit in QuickTime revealed

[Jimmy 2004]

A serious exploit in Apple's QuickTime has been exposed by the "Month of Apple Bugs" project. The exploit affects both Windows and Mac based versions of QuickTime 7.1.3 and earlier. The exploit could potentially allow a hacker to remotely launch what QuickTime thinks is a movie which could then be used to hijack your PC by deleting or encrypting your files for a ransom. Apple doesn't have a patch for this serious exploit yet, so the safest measure to take would be to remove QuickTime from your computer if this proves to be genuine. The project should provide evidence to the public that Macs suffer numerous security flaws and it isn't only Windows based computers.

View at TechPowerUp Main Site

 

[pt]

A serious exploit in Apple’s QuickTime has been exposed by the “Month of Apple Bugs” project. The exploit affects both Windows and Mac based versions of QuickTime 7.1.3 and earlier. The exploit could potentially allow a hacker to remotely launch what QuickTime thinks is a movie which could then be used to hijack your PC by deleting or encrypting your files for a ransom. Apple doesn’t have a patch for this serious exploit yet, so the safest measure to take would be to remove QuickTime from your computer if this proves to be genuine. The project should provide evidence to the public that Macs suffer numerous security flaws and it isn’t only Windows based computers.

Source: Month of Apple Bugs

 

[WarEagleAU]

Wow, something mac is finally able to be hijacked, virused and all that junk. So much for the commercials

 

[Dippyskoodlez]

Wow, something mac is finally able to be hijacked, virused and all that junk. So much for the commercials

ZOMG 5 zillion spywares use it already! Wait, no, its proof of concept..

Is this windows only?

However, this is a QUICKTIME exploit, NOT OS X.

Huge difference. Thats like saying your flaw in AIM makes windows swiss cheese.

IE is an exception still...... because IE is so tightly integrated into windows.

 

[mout12]

Dippy, go buy a Mac if you hate MS so much.

 

[muon]

Dippy, go buy a Mac if you hate MS so much.

Lol. Youre a blind idiot.

 

[pt]

Dippy, go buy a Mac if you hate MS so much.

he has a mac (see his signature)

 

[lemonadesoda]

I love it. I hope someone writes a virus to encryt all the iTunes files and hold them to ransom! By rights, iTunes would need to let the user have another copy of the file, right? Since they sell a license to listen... not a "one off download". That would bring iTunes administration to its knees. LOL

 

[muon]

I love it. I hope someone writes a virus to encryt all the iTunes files and hold them to ransom! By rights, iTunes would need to let the user have another copy of the file, right? Since they sell a license to listen... not a "one off download". That would bring iTunes administration to its knees. LOL

Nice idea. But i thought itunes works in a similar way to Steam? So you can download the music and use it on upto 5 registered pcs?

 

[Wile E]

Nice idea. But i thought itunes works in a similar way to Steam? So you can download the music and use it on upto 5 registered pcs?

Yep, but I don't think you can re-download them.

 

[Jimmy 2004]

Dippy, go buy a Mac if you hate MS so much.

You post that in almost every single news thread about M$, we get the idea. You love M$ and if anyone says a bad word about it obviously they hate it.

Windows XP is a great operating system but it has its flaws, which people have a right to be unhappy about and criticise Microsoft for, but the advantages outweight the disadvantages so they still want to use it. If you get into a disagreement with your partner do you go and find someone else straight away? Just because you say something negative about a thing/person doesn't mean you dislike them.

 

[Dippyskoodlez]

Dippy, go buy a Mac if you hate MS so much.

I've got a macbook pro.

I run windows XP, Vista, and linux, while still managing to play WoW.

Virtualization software rules. I can have the benefits of program compatability, without the massive security flaws, and maintain a sandbox for windows to play in.

 

[Graogrim]

Virtualization software rules. I can have the benefits of program compatability, without the massive security flaws, and maintain a sandbox for windows to play in.

That's the theory.

I'd still advise caution, no matter how secure a system appears to be.

 

[driver66]

That's the theory.

I'd still advise caution, no matter how secure a system appears to be.

WOW nice way to wake up a zombie lol this thread is like a year old

 

[Graogrim]

ROFL I didn't even look at the date. Blame the "similar posts" feature as it's the one that linked this thread right in my face.

 

[driver66]