Posted on 05/01/2007 3:59:17 PM PDT by Yossarian
Apple on Tuesday offered QuickTime 7.1.6, an update to its core multimedia software for Mac OS X and Windows. Among the issues adjusted in this release is a fix for an exploit in QuickTime for Java that first came to light at a security conference two weeks ago.
QuickTime 7.1.6 addresses numerous bug fixes and includes support for Final Cut Studio 2, and timecode and closed captioning support in QuickTime Player. Apple recommends the update for all QuickTime 7 users. It is available for download from Apple’s Web site or from the Software Update system preference.
“An implementation issue exists in QuickTime for Java, which may allow reading or writing out of the bounds of the allocated heap. By enticing a user to visit a web page containing a maliciously-crafted Java applet, an attacker can trigger the issue which may lead to arbitrary code execution,” reads Apple’s technical note announcing the update. “This update addresses the issue by performing additional bounds checking when creating QTPointerRef objects. Credit to Dino Dai Zovi working with TippingPoint and the Zero Day Initiative for reporting this issue.”
The exploit with QuickTime for Java was first reported as a Mac OS X issue as it was the winner in a $10,000 price to break into a MacBook Pro set up at a recent security conference. It was later revealed as a cross-platform security flaw that affects Mac and Windows users alike. Security experts opined that it was inevitable the Mac would suffer such issues. The exploit’s discoverer, Dino Dai Zovi, said he’s been using Mac OS X from the start, though said in a recent interview that he felt Microsoft’s new Vista operating system was more secure than Mac OS X.
Hmm, I didn’t know Mac’s had security flaws.
Ping.
Machead ping!
Hmm, I didn't think you could generate as many useless posts as you have.
LOL! Stand by for the onslaught!
45 megabytes later...
OK, Software update just finished for me... time to restart... see y'all in a bit!
You two, as well as any other PC users, should know that this Quicktime update is for the PC as well. (Ah, unless you're under Linux....)
Here is the direct link to the update page.
Thanks, will check it out.
Thanks for the heads up...
Technically, he’s only generated two — the one seen above, and word for word in a number of other topics, and the other one, seen word for word in a number of other topics, where he says everyone who uses a Mac is gay.
You'd think they'd eventually look for some new material.
BTW, that article on Gilgamesh this morning was too cool.
:’) Epic, even. ;’)
So much for Apple suing, or being malicious towards, those who expose security flaws.
HELP! Please reply in words an eight-year-old can understand. LOL!
I have OS10.4.9. I’ve had Mac for six years, and I am STILL mentally confused by all the years I’ve spent on PC. (UGH) I use my computer ONLY at home, and I have no one to advise me.
I don’t do anything that requires final cut. Is that for users who do movies?
Can I ignore the latest software update and still use my old, original copy of Quick Time? Or will it affect the usual times Quick Time (not Pro) uses?
Does this question even make sense?
The ONLY problem with Mac is that if you use it at home there is NO ONE to help you through the complicated geek talk. You people are so far ahead of us commoners.
I am eager to learn.
Keep it simple:
1. Select the “Software Update
” menu item under the blue Apple menu (available from any application);
2. The Software Update application will launch, and automatically check for updates; and
3. When it asks if you want an update installed, click “OK”.
That’s it! But YES, install this update - it is very, very important, even for basic web surfing.
***But YES, install this update - it is very, very important, even for basic web surfing.***
THAT’S IT! That’s exactly what I needed to know, but didn’t know how to ask it. THANK YOU.
And NOW, if I may ask for a bit more of your valuable time, what the heck does the following mean? And does it apply to me if I don’t do anything more complicated than download someone else’s Quick Time stuff?
“Important Notice to QuickTime Pro Users?QuickTime 7 will disable the QuickTime Pro functionality in prior versions of QuickTime, such as QuickTime 5 or QuickTime 6. If you proceed with this installation, you must purchase a new QuickTime 7 Pro key to regain QuickTime Pro functionality. After installation, visit www.apple.com/quicktime to purchase a QuickTime 7 Pro key.”
Sigh. I feel SO stupid.
Long answer: QuickTime is a software technology that allows you to view, listen to, and create multimedia. It is comprised of
If you pay Apple $15, they give you a "QuickTime Pro" key:
Every time Apple makes a major release of QuickTime, like from version 5 to 6, or from version 6 to 7 (current), they make QuickTime Pro users buy a new key (cha-ching!). These major releases happen about once every two or three years. Minor releases, such as the one done yesterday from QT 7.1.5 to 7.1.6, don't require repurchasing of a key.
Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.