Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Vista Security: Where Are We Now? | Main | Cybercriminal Recruite Like Business »

QuickTime Vulnerability Hits Mac and Windows

Apple has relased an advisory and corresponding patch for several vulnerabilities in QuickTime (About the security content of QuickTime 7.1.5). Using Maliciously-crafted 3GP, MIDI, Quicktime, PICT, QTIFfiles can result in crashing or arbitrary code execution

The vulnerabilities are in both Mac OS X and Windows versions of Quicktime.

Vista's been getting a lot of bad press lately about problems with anti-virus, firewall, encrypting file system and Patch Guard. Those problems are real but we can't forget they are not the full extent of the security problems we face. Third-party apps, especially those that require elevate privileges to run, are also problems.

McAfee, sponsor of this site, was also noted as failing a high profile anti-virus test but it turns out the testers were not using the latest updates. ComputerWorld is reporting:

According to McAfee, Virus Bulletin has accepted that it was not using the latest antivirus updates available at the time of test, which caused McAfee VirusScan Enterprise 8.5 to fail when detecting the test viruses. McAfee is currently working with Virus Bulletin on this discrepancy and to make the updated test results available.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/245

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net