QuickTime exploit circulates on Web
updated 01:20 am EST, Fri November 30, 2007
QuickTime 7.2 exploit
Symantec has notified DeepSight customers that a bug in QuickTime's Real Time Streaming protocol can lead towards the execution of malicious code on any computer running QuickTime 7.2 or later, and that a working proof-of-concept set of code being circulated on the internet. Computerworld reports that the bug was originally posted on milw0rm.com, and that the exploit code had worked when tested against Windows XP and later in Vista. Mac OS X 10.4 Tiger and 10.5 Leopard are said to be vulnerable as well, but took considerably more time for researches to craft a reliable, working exploit.
Apple has not commented on the issue, or supplied a patch for the bug, but Symantec urges QuickTime users to disable Quicktime as an RTSP protocol handler, which should prevent code from being triggered. Symantec also notes that the bug relies on TCP port 554 and UDP ports 6970 - 6999, and that filtering options should be enabled on those ports.
Early Thursday, SonicWALL announced that its Unified Threat Management technology has been updated to understand and prevent the threat posed by Quicktime, while Heiss Security discovered a flaw with Leopard's quarantine system.
Fresh-Faced Recruit
Joined: Apr 2002
We've heard it all before
We've heard it all before. Proof of concepts by the very people who make anti-virus software. Which means they just want to sell you there product and that's all the proof they want. Every supposed proof of concept has been totally wiped as pure FUD. This probably will be too. Now if it was a Windows OS hackers would have already compromised millions of PC's. But it's not, and to date nothing has happened. Unix is very strong in security even if there is a compromise it isn't nearly as easy to exploit it because Unix was built with security first not as an after thought.