Apple Fixes Serious QuickTime Bug
294393
Security update to QuickTime 7.1.6 patches two issues with the way QuickTime interacts with Java.
531228
Nevis Networks, a market leader in persistent LAN security solutions,  today announced that Nevis Labs has identified a vulnerability in Apple  QuickTime.
644473
Adobe Systems Inc. has released fixes for three critical vulnerabilities in Flash Player that could let hackers infect Windows, Mac OS X and Linux systems.
152404
Intuit today fixed a flaw in an automatic QuickBooks Pro for Mac update that that could erase most data stored on a desktop system.
599698
A London security analyst working with the open source group GNUCitizen has discovered a potentially serious exploit that could affect users of the Firefox browser and Apple's QuickTime movie and music player - especially iTunes customers - on Windows XP-based machines. BetaNews tested and verified the severity of the exploit.
23136
The hacker who discovered a recently patched QuickTime flaw affecting the Firefox browser says he has found an equally serious flaw in Adobe Systems Inc.&#39;s PDF file format.
498370
Four issues identified by the Month of Apple Bugs project receive fixes from the company's developer.
216653
Buffer overflow risk neutered In all the hoopla surrounding Apple's announcement of its revamped line of iPods on Wednesday, many users might have missed the company's update to iTunes, which includes a fix for a serious security flaw.â¦
21234
Apple kept its rush of year-end security patches coming Monday, issuing a flurry of fixes for its Mac OS X operating system and the test version of its Safari browser.Monday&#39;s patches included a whopping 31 updates for the Apple operating system. The Mac OS X patches fix components ranging from the Address Book and iChat software to under-the-covers operating system components such as ColorSync, the IO Storage Family, and the Perl, Python and Ruby programming languages.Most of these flaws theoretically could be exploited by attackers to run unauthorized software on the Mac, although some of them had other security implications, such as allowing an attacker to gain access to sensitive information or download files to the computer without authorization.These updates are for the Mac OS X 10.4 and 10.5 operating systems, known as Tiger and Leopard, respectively.Apple also released a minor update to its Safari 3 beta code, which runs on Windows as well as Mac OS X, fixing a cross-site scripting security problem that affects Windows users.The patches come just days after&#160;Apple released a major update to its QuickTime media player and a Java security fix for the Mac OS X 10.4 operating system, code-named Tiger. The QuickTime flaw was particularly serious, as&#160;it had been exploited by online criminals since early December.With hackers and security researchers now paying more attention to Apple&#39;s products, the company&#39;s security team has been working overtime on bug fixes this year. Monday&#39;s patches were Apple&#39;s 35th and 36th security updates this year. In 2006, the company released just 22 sets of patches for its products.
488184
The Mac Observer has confirmed through testing that the recently recently announced iTunes 4.7 release disables iPod Download, a plug-in to iTunes that allowed
690958
One week after updating its Mac OS X operating system, Apple Inc. has patched a serious flaw it its QuickTime media player.
210358
A patch program fixing more than 20 flaws in OS X has been released by Apple.
423687
Apple's movie rental service is cool, but has a pair of flaws.
353081
Blog: Recently patched browser from Apple springs another leak.
758734
(InfoWorld) - Mozilla has fixed a critical bug in the way the Firefox browser works with QuickTime media files. The flaw, which was reported last week by hacker Petko Petkov, gives attackers a way to run unauthorized commands on a victim's PC. "This could be used to install malware, steal local data, or otherwise corrupt the victim's computer," Mozilla said in a security advisory published Tuesday. A July 2007 patch was supposed to take care of this type of problem, but Petkov showed how attackers could still run commands on a victim's system by tricking a victim into opening a maliciously coded QuickTime media file. In fact, until Apple addresses the underlying flaw in QuickTime, there still could be headaches for users, Mozilla said in its security advisory on the issue. "QuickTime Media-link files could still be used to annoy users with popup windows and dialogs until this issue is fixed in QuickTime," the advisory states. The common security measure of disabling JavaScript does not prevent this attack, although the NoScript Firefox add-on does provide protection, Mozilla said. "Petkov provided proof of concept code that may be easily converted into an exploit, so users should consider this a very serious issue," Mozilla's security chief, Window Snyder said in a recent blog posting. Mozilla has been able to reproduce this bug only on the Windows operating system, she added. The flaw also affects the Internet Explorer browser, Petkov said on his blog. However, IE's security policies make the flaw less critical on Microsoft's browser, he added. The Firefox 2.0.0.7 update was pushed out to users starting around 3 p.m. Pacific Time on Tuesday. It contains only one security update: the QuickTime fix.
40844
Vulnerabilities in Apple's widely used QuickTime media player software can expose both Macs and Windows PCs to attack.
521039
The incremental update to iMovie 7 syncs the new version with .Mac Web Gallery and improves stability.