Slashdot Mirror
Firefox Susceptible To QuickTime Security Flaw
Hugh Pickens writes "Apple's QuickTime media player software contains a previously undocumented security weakness in the way QuickTime handles the RTSP media-streaming protocol. The vulnerability is present in QuickTime versions 4.0 through 7.3 (the latest version) on both Windows and Mac systems. Symantec has tested the publicly available exploit code and found that it failed to work properly against Internet Explorer 6/7 or Safari 3 Beta but the exploit works against Firefox if users have chosen QuickTime as the default player for multimedia formats. Firefox users are more susceptible to this attack because Firefox farms off the request directly to the QuickTime Player as a separate process outside of its control, while IE loads the QuickTime Player as an internal plugin and when the overflow occurs, standard buffer-overflow protection is triggered, shutting down the affected processes before any damage can occur."
Man, I'm using IE from now on. It's WAY more secure...
"Quicktime bug!?! Oh sweet Joseph of Arimathea!!!! Quick, inform the users.. YES BOTH OF THEM!"
Glass half empty, half full type thing.
.3764666437 litres. The realist says "there's not enough". The doctor says "he's dead, Jim".
The optimist says the glass is half full. The pessimist says the glass is half empty. The scientist says there is
mcgrew's razor: Never attribute to stupidity that which can be explained by greedy self-interest
The engineer says that the glass is twice as large as it needs to be.
Jack Bauer found out where the glass was, who drank the water, and which government they worked for.
Thomas Galvin
640 mL should be enough for anyone.