New vulnerability in quartz.dll Quicktime parsing

BleepingComputer.com: New vulnerability in quartz.dll Quicktime parsing

Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.

Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

New vulnerability in quartz.dll Quicktime parsing Affects ALL Browsers

#1 buddy215

Forum Addict

Group: BC Advisor
Posts: 4,490
Joined: 14-April 06
Gender:Male
Location:West Tennessee

Posted 28 May 2009 - 05:25 PM

New vulnerability in quartz.dll Quicktime parsing
http://blogs.technet.com/srd/archive/2009/...me-parsing.aspx
The above link include work-a-rounds.

More info:
Microsoft Warns Of 'Browse-And-Get-Owned' DirectX Flaw
http://www.techweb.com/article/showArticle...mp;section=News

#2 FiOS Dan

Member

Group: Members
Posts: 80
Joined: 22-February 09
Location:Redondo Beach, CA

Posted 28 May 2009 - 07:35 PM

Hopefully running as a LUA with HIPS will protect me from any unwanted ".exe" until the inevitable Automatic Update from M$.

Courage is being scared to death but saddling up anyway.

#3 samuel3

Forum Addict

Group: Members
Posts: 2,217
Joined: 13-June 08
Gender:Male

Posted 28 May 2009 - 07:42 PM

Im using Vista so i wont get this. :D

#4 scff249

Indecisive Lurker

Group: Members
Posts: 1,319
Joined: 14-February 08
Gender:Male
Location:A galaxy far, far away...

Posted 28 May 2009 - 08:46 PM

Would providing an advisory for backing up the registry be a good thing to do now since one of the workarounds is deleting a registry key? Just suggesting just in case someone may end up deleting the wrong key by accident or something.....I don't know....just wanting to take precautions.

.....and shutting up...

This post has been edited by scff249: 28 May 2009 - 08:50 PM

"Ototo'i wa usagi o mita no...Kino wa shika...Kyo wa anata." -Kotomi Ichinose (Clannad) [see below for translation]
"Day before yesterday I saw a rabbit, and yesterday a deer, and today, you." -The Dandelion Girl
"You are not alone, and you are not strange. You are you, and everyone has damage. Be the better person." -Katawa Shoujo

BleepingComputer.com: New vulnerability in quartz.dll Quicktime parsing