Zero-day haavoittuvuus quicktimessä

[securapple]

Elikkäs varoivaisuutta tuntemattomasta lähteestä tulevien elokuvien kanssa.

"A hacker who found a vulnerability in QuickTime said he posted the attack code online after Apple ignored him for a month.

The code exploits a flaw in QuickTime that causes a crash when a unusually-long parameter is passed along with a movie file. While it's not demonstrated, the hacker claims that "code execution may be possible."

lisätietoja :
http://feeds.tuaw.com/~r/weblogsinc/tuaw/~3/396351456/