Apple, Adobe address security flaws in QuickTime, Flash

By Ed Oswald | Published April 9, 2008, 4:50 PM

Both companies on Tuesday released rather significant security updates addressing a wide range of security holes in their products.

11 issues are fixed in Apple's update for QuickTime, version 7.4.5. The updates affect both Mac OS X and Windows, although not all security fixes are for both operating systems.

Among the updates for Windows are unexpected application termination or arbitrary code execution issues with opening maliciously crafted PICT image and movie files. The PICT image issue encompasses two separate vulnerabilities: one involves QuickTime's handling of error messages, while the other is due to parsing of the Clip oncode, which could result in a heap buffer overflow.

The rest of the issues are found in both operating systems, and include the following: an issue where untrusted Java applets may obtain elevated privileges; information disclosure due to the downloading of movie files; and application terminations or code executions due to maliciously crafted movie, VR movie or PICT files.

More information on these updates can be found on the Apple website.

Adobe fixed seven issues in its own update to Flash, which dealt with flaws which could give an attacker control of a user's system. The company said a malicious SWF file needs to be loaded in order for the attacker to exploit the vulnerabilities.

The issues affect Adobe Flash Player 9.0.115.0 and earlier, and 8.0.39.0 and earlier, Adobe said. It is recommended that users upgrade immediately to the new version of the player in order to protect themselves.

More information on Adobe's fixes for Flash can be found in its security bulletin on the matter.

Comments

View comments by with a score of at least

Flash and Quicktime - They only "update" worth doing is pressing the UNINSTALL button on both. I love Apple, but Quicktime is old and useless. But Flash is even worse (not that I'm comparing both, as they do different things - but Flash is even more worthless in what it does.) In the matter of crappiness, Adobe always seems to find a way to outperform others.

Score: 0

|

I tell you what mjm.. I'll make you a bet and it's this- Apple will go under (and won't have MS to bail them out) long before MS does. If I am wrong, I'll come on here and tell you I am sorry. If I am right, you go back to your mom's house if you are not already living there.
Here's why, Apple has lost it's core identity. In it's rush to be hip and cool and be everything to everyone they will slowly get eaten up by increasing competition in the areas that make them a lot of money and won't have anyone this time to bail them out.

A little history- Apple was on the verge of going under in the late 90's and MS gave the several hundred million dollars to save them. Apple is doing the same thing but this time their is no safety net. So buy Apple products but don't whine and weep when they are gone and it won't be because of MS but because of Jobs who thinks the sun shines out his A** and can't see the trainwreck that's coming.
With IPhone 2 already reported hacked before it's released and almost 1/3 of the current IPhone "unlocked" but not by ATT (which Apple gets a share of the revenue- that's why they went with a sh** carrier like ATT), with the investigation of the ipod nano tendency to catch fire being investigated in Japan and with the increasing amount of these devices that aren't as restrictive as Apple (shades of the 90's), it's only a matter of time. In their core business, what the newest thing ? The dumb Mac Air notebook that in head to head test gets beaten solidly by some other notebooks of the same kind.

So keep buying into that "hip image" and just make sure you don't buy any Apple stock (unless ,like jobs you can get backdated stock and not report to the SEC).

I am not advocating an MS over any other OS just saying that when any company loses it's core identity the next stop on the trainwreck is bankruptcy.

Score: 0

|

Here is my bet...M$ continues to fail with Zune, XBox, Windows Mobile, and anywhere they actually have to compete for marketshare without relying on their monopoly of Windows and Office.

The future economic powers: China, India and Brazil do not get locked into M$ closed, proprietary formats and protocols, and M$ sales go flat.

The EU finds M$ totally abused and bribed their horrid, patent encumbered M$OOXML format through the ISO.

M$ Office implementations of M$OOXML work slightly different than other implementations thereby making the version which Office reads/writes the "standard" rather than what was rubber stamped by ECMA and bribed through ISO. No other application will be able to work exactly "right" with the format so you will have to get Office to use it.

If i am wrong on any of these i will come on here and tell you i am sorry. If i am right, which you know i will be, i will make all the M$ drones on here cry about Sony, Nintendo and Apple some more.

Score: 0

|

the one and only pit$ingo

Score: 0

|

Laughing..you're on. But it's a suckers bet. GE and MS are the largest corporations in the world.

Score: 0

|

The troll has spoken.

For the record you will be wrong as you always are.

The only one here that gets their boxers in a bunch is you.

Score: 0

|

As soon as you type MS with a dollar sign you are a troll as you have completely left all sense at the door.

Xbox (while it does have it shares of problems with quality is still selling despite the fact) and Windows Mobile are far from failing...Zune while not doing as good as ipod is still moving up and is the number 2 player in the game...

There was one person who was NOT associated with the msooxml scandal and now its the entire company? really? Don't you have anything better to do then complain about MS, seriously you know nothing about any of their products, yet keep on talking about them.

You will be wrong as you always are. The Zune is going to have a version 3 and will be available in other countries, if that's failing, I don't think they have anything to worry about...

Score: 0

|

Wow. You're just full of your special brand of Bulls*** today, aren't you?

The three products you mention are just fine and in no danger. The Zune is growing in market share, the XboX and Windows Mobile both have strong footholds in their markets and are profitable.

The OOXML rant is pure BS, none of it bears any resemblance to reality, but we've pretty much come to expect that from you.

When have you *ever* been right?

Score: 0

|

My mom died 10 years ago from a brain hemmorage as a result of lung cancer spreading to her brain. I had moved out 4 years before her death. When I was living with her, she put me through school, where I eventually got the skills I needed to become an Information Tech Manager/CIO of a law firm.

I don't know where you get off thinking I am an Apple lover? I abhor Apple's marketing, (I find it condescending beyond local TV news, and that is pretty bad,) and I refuse to purchase an Apple product because of it. I do support it for various political powers-that-be where I work and their sheep-pods.

I'm not stupid, I realize Apple is on a roll, and they have the right to be: consumers are mostly sheep. They see something "cool" and they drool a tad. I could care less.

I do like what I see out of OSX, but, again, the marketing behind the product leaves me with a very, very bad taste in my mouth.

Apple isn't going anywhere. They *own* the music market and they will likely be up there for owning distribution of movies in the future. I'm not sure if you know this, but this puts apple in a far better position than google or MS in the trillions dollar entertainment realm.

I get people like my girlfriend trying vista, saying "what is this s***, take it off," to people like 30-year veteren tech IP patent attorneys screaming at me about how they want their iphone to connect to Exchange seamlessly, and I see a s***. It ain't gonna happen overnight, but I see definite cracks in MS's shell. People won't even consider Microsoft Mobile OS. It is SUCH A JOKE compared to iphone.

To think if Microsoft had avoided antitrust status, they would dominate a lot more now. That case really really hurt them for long term outlook.(see europe now, Europe is powerful and they aren't having MS's shenanigans.) But they will also make money hand over first due to legacy laziness.

At heart/I adore linux. I love the idea of controlling my OS and my data and my direction. I don't like a dist? Just move over to another. My data is safe. I know with linux, the data isn't locked down in any way, I'm not held to a possible faraday cage of validation checks from Microsoft every time I turn my OS on. But my job pays me to be a Windows admin, so I begrudgingly stay on it.

Score: 0

|

Zune can't help but grow in market share, otherwise they'd be at zero.

Score: 0

|

MJM? I take back anything negative that I said. You seem like a decent chap. The only thing I disagree with is that Apple's share of music is going to go down as more and more and better players hit the market and use better music formats than Apple's lame music format. Loss of revenue. Also, since they will continue to see both an erosion in revenue from the IPhone because better ones are coming out and a continued loss of revenue from AT&t because they get a cut of their revenue and it is estimated that 1/3 of all IPhones have been unlocked and not by AT&T which means less money for Apple.

Don't be fooled by stock prices. Apple and Google have not done what is called stock splits and you could add the total stock value of both companies and this would be a drop in the bucket compared to MS or GE.

Have a great day.

Score: 0

|

Two really old applications that really should be nearing the end of constant security updates.

That a media player has so many vulns is just pathetic. It should play media: that is it. sheesh.

Score: 0

|

Gee... no comments from Apple and Quicktime fanatics? It's just shows them in their true light when the flood this site with their venom when it's MS but are amazing quiet when it's apple or quicktime.

Just shows the arrogance of both companies in thinking their stuff is secure and the fanatics belief in whatever the god Job has to say. Welcome to robotland.

Score: 0

|

Don't you get it. It's Apple, it's perfect. This article is a hoax.

/sarcasm

Score: 0

|

Oh good, another "opportunity" to get Safari...

Score: 0

|

'A pivot from war to peace:' The AMD + Intel armistice, in their own words

An extraordinary day in technology history is recognized by two long-time rivals that mutually decided it's futile to fight anyplace else except the marketplace.

PS3, Xbox to soon get Twitter, Facebook integration

Both Microsoft's Xbox 360 and Sony's PlayStation 3 will integrate with Facebook in the near future.

Windows Marketplace for Mobile now available in browser, iTunes' App Store still not

You can now check out what Windows Marketplace for Mobile has to offer without a Windows Phone.

Microsoft damage control after marketer claims Win7 inspired by Mac

Have you ever said anything you wish you could take back? Ever? No? Not even once? Well then, you won't sympathize with a mid-level Microsoft manager today.

Blockbuster's way down, but poised for a comeback

Though it took a serious beating in 2009, Blockbuster CEO Jim Keyes says the company can turn it around.

iTunes Preview deson't go far enough to create Web-based option for store

Apple has rolled out iTunes Preview, a Web interface for browsing iTunes.

PDC 2009 Preview: The move to Office 2010 and Visual Studio 2010

The major focus of Microsoft's conference next week will likely be explaining why two pillars of its software sales strategy deserve to remain where they are.

Dell's first smartphone aids the Android onslaught

Longtime PC leader Dell has finally announced its Android-based smarphone.

After the Intel + AMD armistice: Do we really want a level playing field?

Scott Fulton On Point: One by one, the reasons for us to continue suspending the course toward open and fair competition in IT, are dropping like flies.

FLO TV launches pocketable, smartphone-like TVs

Qualcomm's FLO TV Personal Television made by HTC launches in retail today.

Google acquires Gizmo5, builds IP telephony portfolio

Google Voice today confirmed rumors that it would acquire IP telephony company Gizmo5