por ElTxolo » Jue Oct 27, 2011 1:27 pm
Holas!
Actualización de seguridad disponible, QuickTime Player-Plugin (October 27th, 2011'): QuickTime Player 7.7.1
Apple ha publicado una nueva versión de QuickTime (la 7.71.80.42), que solventa diferentes problemas de seguridad en sus versiones para Windows y Mac OS.
La actualización puede instalarse a través de las funcionalidades de actualización automática (Software Update) de Apple, o descargándolas directamente desde:
http://www.apple.com/quicktime/download/
QuickTime 7.7.1
Available for: Windows 7, Vista, XP SP2 or later
- An error within the processing of GIF files can be exploited to cause a heap-based buffer overflow by tricking a user into opening a specially crafted GIF file.
- Multiple errors within the processing of H.264 files can be exploited to cause stack-based buffer overflows by tricking a user into opening a specially crafted file.
- An error within the QuickTime ActiveX control when processing QTL files can be exploited to cause a stack-based buffer overflow by tricking a user into visiting a malicious website.
* Note: Vulnerabilities #1 through #3 do not affect Mac OS X versions. - A buffer overflow existed in QuickTime's handling of H.264 encoded movie files. For OS X Lion systems, this issue is addressed in OS X Lion v10.7.2. For Mac OS X v10.6 systems, this issue is addressed in Security Update 2011-006.
- An uninitialized memory access issue existed in QuickTime's handling of URL data handlers within movie files. For OS X Lion systems, this issue is addressed in OS X Lion v10.7.2. For Mac OS X v10.6 systems, this issue is addressed in Security Update 2011-006.
- An implementation issue existed in QuickTime's handling of the atom hierarchy within a movie file. For OS X Lion systems, this issue is addressed in OS X Lion v10.7.2. For Mac OS X v10.6 systems, this issue is addressed in Security Update 2011-006.
- A cross-site scripting issue existed in QuickTime Player's "Save for Web" export. The template HTML files generated by this feature referenced a script file from a non-encrypted origin. An attacker in a privileged network position may be able to inject malicious scripts in the local domain if the user views a template file locally. This issue is addressed by removing the reference to an online script. This issue does not affect OS X Lion systems. For Mac OS X v10.6 systems, this issue is addressed in Security Update 2011-006.
- A buffer overflow existed in QuickTime's handling of FlashPix files. For OS X Lion systems, this issue is addressed in OS X Lion v10.7.2. For Mac OS X v10.6 systems, this issue is addressed in Security Update 2011-006.
- Multiple memory corruption issues existed in QuickTime's handling of movie files. For OS X Lion systems, these issues are addressed in OS X Lion v10.7.2. For Mac OS X v10.6 systems, these issues are addressed in Security Update 2011-006.
- A signedness issue existed in the handling of font tables embedded in QuickTime movie files.
- An integer overflow issue existed in the handling of JPEG2000 encoded movie files.
- A memory corruption issue existed in the handling of TKHD atoms in QuickTime movie files. This issue does not affect Mac OS X systems.
Descarga: QuickTime Player 7.71.80.42.exe
Un Saludo.
Holas! ;)
[list]
Actualización de [b]seguridad[/b] disponible, [b]QuickTime Player-Plugin[/b] (October 27th, 2011'): [url=http://support.apple.com/kb/HT5016][b][color=red][size=180][u]QuickTime Player 7.7.1[/u][/size][/color][/b][/url]
Apple ha publicado una nueva versión de QuickTime (la 7.71.80.42), que solventa diferentes problemas de seguridad en sus versiones para Windows y Mac OS.
La actualización puede instalarse a través de las funcionalidades de actualización automática (Software Update) de Apple, o descargándolas directamente desde:
http://www.apple.com/quicktime/download/
[quote][list][b]QuickTime 7.7.1[/b]
[i][b]Available for: Windows 7, Vista, XP SP2 or later[/b]
[*] An error within the processing of GIF files can be exploited to cause a heap-based buffer overflow by tricking a user into opening a specially crafted GIF file.
[*] Multiple errors within the processing of H.264 files can be exploited to cause stack-based buffer overflows by tricking a user into opening a specially crafted file.
[*] An error within the QuickTime ActiveX control when processing QTL files can be exploited to cause a stack-based buffer overflow by tricking a user into visiting a malicious website.
* Note: Vulnerabilities #1 through #3 do not affect Mac OS X versions.
[*] A buffer overflow existed in QuickTime's handling of H.264 encoded movie files. For OS X Lion systems, this issue is addressed in OS X Lion v10.7.2. For Mac OS X v10.6 systems, this issue is addressed in Security Update 2011-006.
[*] An uninitialized memory access issue existed in QuickTime's handling of URL data handlers within movie files. For OS X Lion systems, this issue is addressed in OS X Lion v10.7.2. For Mac OS X v10.6 systems, this issue is addressed in Security Update 2011-006.
[*] An implementation issue existed in QuickTime's handling of the atom hierarchy within a movie file. For OS X Lion systems, this issue is addressed in OS X Lion v10.7.2. For Mac OS X v10.6 systems, this issue is addressed in Security Update 2011-006.
[*] A cross-site scripting issue existed in QuickTime Player's "Save for Web" export. The template HTML files generated by this feature referenced a script file from a non-encrypted origin. An attacker in a privileged network position may be able to inject malicious scripts in the local domain if the user views a template file locally. This issue is addressed by removing the reference to an online script. This issue does not affect OS X Lion systems. For Mac OS X v10.6 systems, this issue is addressed in Security Update 2011-006.
[*] A buffer overflow existed in QuickTime's handling of FlashPix files. For OS X Lion systems, this issue is addressed in OS X Lion v10.7.2. For Mac OS X v10.6 systems, this issue is addressed in Security Update 2011-006.
[*] Multiple memory corruption issues existed in QuickTime's handling of movie files. For OS X Lion systems, these issues are addressed in OS X Lion v10.7.2. For Mac OS X v10.6 systems, these issues are addressed in Security Update 2011-006.
[*] A signedness issue existed in the handling of font tables embedded in QuickTime movie files.
[*] An integer overflow issue existed in the handling of JPEG2000 encoded movie files.
[*] A memory corruption issue existed in the handling of TKHD atoms in QuickTime movie files. This issue does not affect Mac OS X systems.
[/i][/list]
[/quote]
[img]http://i40.tinypic.com/x1btyc.png[/img]
[b]Descarga:[/b] [url=http://appldnld.apple.com/QuickTime/041-3089.20111026.Sxpr4/QuickTimeInstaller.exe][b][i]QuickTime Player 7.71.80.42.exe[/i][/b][/url][/list]
Un Saludo. :bitchin:
