Anybody got an Apple comp?

[Ed]

I think I vaguely remember somebody having one here   Anyhoo, I found this -

Attention Apple users: Step away from reading about MacWorld, put down your iPods and update your QuickTime software now to prevent a hacker from taking over your system.

There are five highly critical flaws in Apple's QuickTime application that affect both Apple and Windows versions, as well as Apple's popular iTunes application.

The flaws all relate to image-handling issues inside of QuickTime. CVE-2005-2340 is described by security firm Secunia as, "a boundary error in the handling of QTIF images [that] can be exploited to cause a heap-based buffer overflow." Such a buffer overflow could allow an attacker to execute arbitrary code.

CVE-2005-3707, CVE-2005-3708 and CVE-2005-3709 involve the TGA image file format that, when viewed, could also result in arbitrary code execution. CVE-2005-3710 and CVE-2005-3711 are similar flaws but related to the TIFF file format. CVE-2005-3713 affects GIFs.

CVE-2005-4092 is described by Secunia as, "a boundary error in the handling of certain media files [that] can be exploited to cause a heap-based buffer overflow." Again the potential impact is arbitrary code execution when a malicious media file is viewed.

According to Security firm eEye, which claims credit for discovery of a number of the vulnerabilities, QuickTime users aren't the only ones at risk. Users of iTunes are also at risk due to its tight integration with QuickTime and, as such, "all of these security issues are also exploitable via the iTunes software."


FULL STORY @ http://www.internetnews.com/security/article.php/3576771

[Ed]

Looks like it affects Windows versions of the Quicktime player, too, so if you've got Quicktime on your comp, you should update it or uninstall Quicktime and install a free codec instead (which doesn't force you to have iTunes running in the background without your permission) link to codec - http://www.free-codecs.com/download/QuickTime_Alternative.htm

[canadian]

Finally! The Mac users of the world now have to deal with a system flaw!!! Think they'll all stop being so holier-than-thou now? 

[Ed]

Gotta laugh, haven't you?   Mind you, they had that virus scare backalong, too - I bet it was written by a hacker who got fed up with all the bragging

[doolols]

Thanks, Blunt. Yes, I do have an iBook, and freely plugged its wireless aeriel into any old dirty internet connection I could find. Maybe I should be a little more careful. I expect they'll have a fix (that is, a fix, that works, and doesn't itself need a fix a couple of weeks later) soon.

Holier than thou? 'Bragging?' Not us. We have no time for all of that stuff, since we're all being so productive with our proper operating systems 

[canadian]

I worked as Office Manager for a timber frame home builder yonks ago. The President was a huge Mac convert, mainly 'cause he did a lot of architectural drawings. As much as I loved my iMac, it was tiring to listen to the Pres wax poetic daily about the virtues of Apple!

Have to say, though ... in twelve years of Mac use, including developing a huge web site and handling millions of e-mails, not once did we have a virus problem.

[Ed]

I very nearly bought an iMac last time I updated, but everything is that much more expensive for them, and I've got loads of programmes that would no longer work, so that put me off.  For commercial use, they seem to be very good and have become the industry standard in a lot of fields, like graphic design and publishing.

[doolols]

Yep, I love them. It's surprising how much software is available on Mac these days. Stuff I have on my Apple I really need. Including MS Office.

I bought my iBook because it's small, self-contained, light, with good battery life.

Okay, and it's just so damned SEXY!