New Security Update: What's it all about?

By Erica Sadun

Apple just released a new Security Update for QuickTime. Do you remember the recent worries about malicious URLs? The ones about opening QuickTime to arbitrary code execution when linking to streaming protocol (RTSP) URLs? This patch responds to the buffer overflow issue in QuickTime's RTSP URL handling. "A QTL file that triggers this issue has been published on the Month of Apple Bugs web site (MOAB-01-01-2007). This update addresses the issue by performing additional validation of RTSP URLs." Nice to note that Apple has been keeping track of MOAB and is responding to its concerns in a timely fashion.

Thanks MT

Recommended