Zero-Day Exploit For Apple's QuickTime Posted

H

HardOCP News

[H] News
Joined
Dec 31, 1969
Messages
0
A security researcher has posted a proof-of-concept exploit for a zero-day vulnerability in the most current versions of QuickTime. The vulnerability affects both Windows and Mac OS X versions.

"The bug is a buffer-overflow and the return address can be fully overwritten so a malicious attacker could use it for executing malicious code on the victim," Auriemma said in an e-mail.
Click to expand...
 
Eulogy said:
Sometimes that pr0n just requires it. I mean....
Click to expand...

Every one I've come across use DivX and MPG. :p

I mean.. everyone a friend of mine told me he came across use DivX and MPG.
 
Azhar said:
Every one I've come across use DivX and MPG. :p

I mean.. everyone a friend of mine told me he came across use DivX and MPG.
Click to expand...
Yeah yeah, my "friend". ;)
I'm sure there's endless jokes about [H] just waiting to be re-told.
 
Eulogy said:
Yeah, we knew that, didn't we? If you read the article, or even the clip Steve posted, it it valid in Windows environments too.

Way to be childish over it.

:rolleyes:
Click to expand...

Dude... Just wow...

*Hands Eulogy 42 chillpills* :D
 
A good alternatice is VLC Player. Even though I hate opensource it's one of the better players.
 
VLC Just WORKS :p

LOL heheh

VLC is possibly the best player out there. And i would give windows media player a far 2nd place. If not a distant 3rd.
 
[RIP]Zeus;1031911837 said:
VLC Just WORKS :p

LOL heheh

VLC is possibly the best player out there. And i would give windows media player a far 2nd place. If not a distant 3rd.
Click to expand...

VLC is pretty nice, but don't for Media Player Classic. all the functionality of WMP, none of the crap.
 
Maybe I don't know what I'm talking about here, but I think it's time for Apple to stop issuing patches for QuickTime and simply rebuild it from the ground up. The flurry of recent QuickTime vulnerabilities is just astounding (or perhaps I'm just seeing them reported more often than I do others?)
 
HA! I guess Apple has exploits too!
Click to expand...

secunia reported well over a hundred vulnerabilties for apple OSX last 2007, while M$'s XP & vista had only a combined 23 (It was posted in the headlines here if I remember). and besides, everything has exploits. you just have to dig deep enough, I doubt something would be 100% exploit free :cool:
 
dyzophoria said:
secunia reported well over a hundred vulnerabilties for apple OSX last 2007, while M$'s XP & vista had only a combined 23 (It was posted in the headlines here if I remember). and besides, everything has exploits. you just have to dig deep enough, I doubt something would be 100% exploit free :cool:
Click to expand...

Microsoft's operating sytems are proven to be more stable. But it's hilarious how the apple fans go "Our stuff is more secure than yours" only to find that they have zero-day exploits in more numbers than VIsta users.
 
dyzophoria said:
secunia reported well over a hundred vulnerabilties for apple OSX last 2007, while M$'s XP & vista had only a combined 23 (It was posted in the headlines here if I remember). and besides, everything has exploits. you just have to dig deep enough, I doubt something would be 100% exploit free :cool:
Click to expand...

Psst.. nobody says M$ anymore. It's old old old, and very invalid.
 
It actually weakens Linux/Mac lover's stance if they use that jargon. But I know what you mean. Whatever floats their boat, right?
 
L33t Masta said:
Microsoft's operating sytems are proven to be more stable. But it's hilarious how the apple fans go "Our stuff is more secure than yours" only to find that they have zero-day exploits in more numbers than VIsta users.
Click to expand...

The average mac user would have no clue what a Zero-Day exploit actually is, so your argument is invalid :D

hell, the average mac user doesn't even know that you should delete the .dmg containers (like a .zip file) that applications come in :rolleyes:

Goddamn my kind is stupid.
 
I do HSI technicle support for Comcast over the phone here in Canada and by no means is it just the Mac users that are stupid. I sometimes wonder howsome americans function when they don't know which cord is the power cable and have to ask me what it looks like. Or if people can hack their Gibson with their IP address...
 
L33t Masta said:
Steve Ballmer says it's a cancer. I'm a hopeless Microsoft fanboy so I have to agree. Besides, the motivation of cash makes products better!
Click to expand...

I disagree wholeheartedly, VLC, OpenOffice, FireFox, ThunderBird, PeerGuardian and the operating systems of Unix and Linux are clear superiors to their counterparts even if Linux / Unix lack the financially educed compatibility to expand beyond the server markets where they are considered by far to be superior to microsoft alternatives.
 
The Red said:
I disagree wholeheartedly, VLC, OpenOffice, FireFox, ThunderBird, PeerGuardian and the operating systems of Unix and Linux are clear superiors to their counterparts even if Linux / Unix lack the financially educed compatibility to expand beyond the server markets where they are considered by far to be superior to microsoft alternatives.
Click to expand...

VLC is the only good program mentioned. Opera is better than firefox because it gets everything before firefox and usually does it better. Also Opera doesn't take 400MB of my RAM when I have 17 tabs open and firefox did. Office 2007 was done right for a change and is far better than OpenOffice especially with OOXML gaining more popularity. Windows Mail is better than Thunderbird (hell, when someone calls in with thunderbird I won't even wander into the settings to help them fix it), PeerGuardian is trash because torrents are useless and Unix and Linux have no real world application other than server usage. Hence why 90% of the world uses Windows/Mac and 85% is Windows.

Opensource is for cheapskates and poor people trying to cover up their disparity by showing off all these applications made for their slow systems. Hence everyone with a decent PC won't even go near Linux because it's a useless pile of trash that should only be installed onto a server.
 
L33t Masta said:
PeerGuardian is trash because torrents are useless
Click to expand...

ueslessvn5.png


Yet I seem to continue to find use for them.

Torrents are only useless for open trackers where everyone downloads and no one uploads. I consistently get 2MByte/sec down at home and ~5MByte/sec down at school. Find me somewhere else that can offer those speeds to thousands of users simultaneously and be still supported by unintrusive advertisements.
 
Nemesis999 said:
ueslessvn5.png


Yet I seem to continue to find use for them.

Torrents are only useless for open trackers where everyone downloads and no one uploads. I consistently get 2MByte/sec down at home and ~5MByte/sec down at school. Find me somewhere else that can offer those speeds to thousands of users simultaneously and be still supported by unintrusive advertisements.
Click to expand...

The USENET.
 
Nemesis999 said:
ueslessvn5.png


Yet I seem to continue to find use for them.

Torrents are only useless for open trackers where everyone downloads and no one uploads. I consistently get 2MByte/sec down at home and ~5MByte/sec down at school. Find me somewhere else that can offer those speeds to thousands of users simultaneously and be still supported by unintrusive advertisements.
Click to expand...

I seem to have to pay for USENET.
 
My ISP gives me a free connection as should most DECENT ISPs. It's unlimited and always maxxes out my download limit. It's 100% legal in Canada too because there is no upload, strictly download.
 
L33t Masta said:
My ISP gives me a free connection as should most DECENT ISPs. It's unlimited and always maxxes out my download limit. It's 100% legal in Canada too because there is no upload, strictly download.
Click to expand...

Whose your ISP? Rogers killed my Usenet connection.
 
L33t Masta said:
My ISP gives me a free connection as should most DECENT ISPs. It's unlimited and always maxxes out my download limit. It's 100% legal in Canada too because there is no upload, strictly download.
Click to expand...

Oh yeah, also it's not legal, just more illegal for a body to prosecute you for using it. Decriminalized is more accurate.
 
Arcygenical said:
Oh yeah, also it's not legal, just more illegal for a body to prosecute you for using it. Decriminalized is more accurate.
Click to expand...

Well no. Because technicallly I am not breaking any CANADIAN laws by downloading. It's uploading that gets you in shit inCanada, downloading is like borrowing a CD from a friend. I can't be charged with any kind of crime. :) ...if idid use the usenet to download files I mean.
 
You must log in or register to reply here.
Back
Top