Slashdot Mirror
Security Hole in Windows' QuickTime Player
Zonoprh writes "A Security Hole was found in QuickTime player that allows attackers to compromise a user's system with a malicious URL. The hole is fixed in QuickTime 6.1 available here. Until then, hold off on playing "unusually" enticing QT files."
How much good will this do in the Apple section if the bug is in the Windows version?
omnia tua castra sunt nobis
Had windows used a decent method of starting applications (instead of some stupid extension to DOS) then this overflow wouldn't happen. Yes, yes, I know, Apple should have checked for this overflow. However 1 kludge + 1 workaround != 1 good system.
*sigh*
I am artificially intelligent.
QuickTime 6.1.1 is also available on software update. Seems to container mpeg 4 streaming bug fixes.
Since when do notices of security holes that have been fixed for months rate /. articles?
"The worst tyrannies were the ones where a governance required its own logic on every embedded node." - Vernor Vinge
I am a homosexual. I bought an Apple computer because of its well earned reputation for being "the" gay computer. Since I have become an Apple owner, I have been exposed to a whole new world of gay friends. It is really a pleasure to meet and compute with other homos such as myself. I plan on using my new Apple computer as a way to entice and recruit young schoolboys into the homosexual lifestyle; it would be so helpful if you could produce more software which would appeal to young boys. Thanks in advance.
with much gayness,
Father Randy "Pudge" O'Day, S.J.
Could someone please comment regarding whether the vulnerability affects wine? I saw the other post saying that it had to do with a registry key buffer overflow, so it seems possible that wine might not have this vunerability.
If so, then, are we Linux users safe from this particular bug? In either case, will the upcoming version of Crossover Plugin support QT6.1?
Thanks for your letter. Being Catholic myself, I know exactly what you're talking about! It has always been our plan here at Apple Computer Inc to revolutionize personal computing with our high-quality and highly gay products.
I'm happy to answer your letter by letting you know that YES we will be releasing an entire hLife ("homo-life") software line. You'll be able to recognize it in stores by the small stylized logo depicting a large cock entering a tight anus with an Apple logo on it. ("Suddenly it all comes together" indeed!).
Anyway, I hope you and other members of our community will join us on our mission, and purchase the exciting new hLife boxed set. Only the boxed set comes with translucent cock rings!
Sincerely,
Harry Rodman
Vice-president
Homosexual Liaison Services
Apple Computer, Inc.
until then, hold off on playing "unusually" enticing QT files.Umm... QuickTime 6.1 was released on January 9th; I would think most people would already have this patched.
"Reality is just a convenient measure of complexity" -Alvy Ray Smith
i'm on a diet!
WTF do you mean "extension to DOS"? You mean command line parameters (arguements)? Unix does the same thing. There are plenty of ways around using parameters under Windows, but they're more trouble to code for (IMO) for such a simple task, and not backward compatible - there is nothing wrong with the parameter method as long as idiot programms check their fucking buffers.
Opportunity knocks. Karma hunts you down.
From software update:
QuickTime 6.1.1 delivers important bug fixes to MPEG-4 streaming.
quicktime 6.1 has been available for some time now for the mac, I wonder if this has been the holdup on windows....
You mean this thing im trying to play here isnt britney spears nude?
Hmm why is KILL KILL KILL appearing on the screen, must be a stuck key...
Slashdot - The one stop shop for procrastination
What you're telling me is that if somebody goes through this complicated procedure, they can crash my windows computer. Hmmm.
Where I come from, the complicated procedure is called "powerup", and I usually crash my windows box every damn day. Some days, I can even take it down on command with a bitchin' blue screen and a crunching sound.
My name is masq, and i'm definitely gonna be a switcher - once the new 15" PowerBooks come out.
Keep the Quicktime Player. Throw out your copy of Windows.
6.1 for MacOS X was released a few months ago, but 6.1 for Windows was only yesterday (Monday). Also released yesterday was 6.1.1 for MacOS X. MacOS 8/9 is still at 6.0.2. No official word from Apple that I know of, but I imagine that might be the terminal release for classic.
Alas, the release notes for 6.1 are the same as 6.0, which is odd given the amount of time between releases.
My video compression blog
Just use MPlayer, it supports most Quicktime files.