New Quicktime Exploit Is Cross-platform

BleepingComputer.com: New Quicktime Exploit Is Cross-platform

Page 1 of 1

You cannot start a new topic
You cannot reply to this topic

New Quicktime Exploit Is Cross-platform OSX and Windows Affected, Includes Firefox, IE, Safari, etc.

#1 Security Geek

Member

Group: Members
Posts: 39
Joined: 10-March 06

Posted 23 April 2007 - 11:00 PM

Turns out the bug that won the $10,000 prize for hacking a Mac can also affect Windows computers. The Mac was "owned" by using Java through Safari to exploit a vulnerability in Quicktime. The same can be done to any Java capable browser on either the Mac platform (probably including PPC based) and the Windows platform. See story below as to how this works.

Firefox, IE and Opera on a Windows computer are known to be at risk. Whether this can lead to full system compromise is still to be determined. Exploits are not yet in the wild but have been tested at least on the Mac.

Tracking at NIST.org

Please post comments back here at BleepingComputer.com

John at NIST.org

NIST.org- It's not enough to be secure, you have to prove you're secure.™