• Welcome to TechPowerUp Forums, Guest! Please check out our forum guidelines for info related to our community.

Zero-day exploit in QuickTime revealed

Jimmy 2004

New Member
Joined
Jan 15, 2005
Messages
5,458 (0.78/day)
Location
England
System Name Jimmy 2004's PC
Processor S754 AMD Athlon64 3200+ @ 2640MHz
Motherboard ASUS K8N
Cooling AC Freezer 64 Pro + Zalman VF1000 + 5x120mm Antec TriCool Case Fans
Memory 1GB Kingston PC3200 (2x512MB)
Video Card(s) Saphire 256MB X800 GTO @ 450MHz/560MHz (Core/Memory)
Storage 500GB Western Digital SATA II + 80GB Maxtor DiamondMax SATA
Display(s) Digimate 17" TFT (1280x1024)
Case Antec P182
Audio Device(s) Audigy 4 + Creative Inspire T7900 7.1 Speakers
Power Supply Corsair HX520W
Software Windows XP Home
A serious exploit in Apple's QuickTime has been exposed by the "Month of Apple Bugs" project. The exploit affects both Windows and Mac based versions of QuickTime 7.1.3 and earlier. The exploit could potentially allow a hacker to remotely launch what QuickTime thinks is a movie which could then be used to hijack your PC by deleting or encrypting your files for a ransom. Apple doesn't have a patch for this serious exploit yet, so the safest measure to take would be to remove QuickTime from your computer if this proves to be genuine. The project should provide evidence to the public that Macs suffer numerous security flaws and it isn't only Windows based computers.

View at TechPowerUp Main Site
 

pt

not a suicide-bomber
Joined
Mar 11, 2006
Messages
8,956 (1.36/day)
Location
Portugal
Processor AMD Turion 64 X2 Mobile TL-60 (Trinidad)
Motherboard ASUS F3Ka (ATI RS690M)
Cooling stock
Memory Nanya 2x1GB ddr2 667@5-5-5-15-2T
Video Card(s) ATI Mobility Radeon HD2600 512MB DDR2@ 580mhz/486mhz
Storage 160GB on laptop+250GB external
Display(s) ASUS 15.4
Case Asus Laptop F3Ka chassis
Audio Device(s) on-board
Power Supply 1:30minutes battery
Software "genui xp", 'cause i hated vista
A serious exploit in Apple’s QuickTime has been exposed by the “Month of Apple Bugs” project. The exploit affects both Windows and Mac based versions of QuickTime 7.1.3 and earlier. The exploit could potentially allow a hacker to remotely launch what QuickTime thinks is a movie which could then be used to hijack your PC by deleting or encrypting your files for a ransom. Apple doesn’t have a patch for this serious exploit yet, so the safest measure to take would be to remove QuickTime from your computer if this proves to be genuine. The project should provide evidence to the public that Macs suffer numerous security flaws and it isn’t only Windows based computers.

Source: Month of Apple Bugs

:laugh: :laugh: :laugh: :laugh: :laugh:
 

WarEagleAU

Bird of Prey
Joined
Jul 9, 2006
Messages
10,812 (1.67/day)
Location
Gurley, AL
System Name Pandemic 2020
Processor AMD Ryzen 5 "Gen 2" 2600X
Motherboard AsRock X470 Killer Promontory
Cooling CoolerMaster 240 RGB Master Cooler (Newegg Eggxpert)
Memory 32 GB Geil EVO Portenza DDR4 3200 MHz
Video Card(s) ASUS Radeon RX 580 DirectX 12 DUAL-RX580-O8G 8GB 256-Bit GDDR5 HDCP Ready CrossFireX Support Video C
Storage WD 250 M.2, Corsair P500 M.2, OCZ Trion 500, WD Black 1TB, Assorted others.
Display(s) ASUS MG24UQ Gaming Monitor - 23.6" 4K UHD (3840x2160) , IPS, Adaptive Sync, DisplayWidget
Case Fractal Define R6 C
Audio Device(s) Realtek 5.1 Onboard
Power Supply Corsair RMX 850 Platinum PSU (Newegg Eggxpert)
Mouse Razer Death Adder
Keyboard Corsair K95 Mechanical & Corsair K65 Wired, Wireless, Bluetooth)
Software Windows 10 Pro x64
Wow, something mac is finally able to be hijacked, virused and all that junk. So much for the commercials
 
Joined
Jul 1, 2005
Messages
5,197 (0.76/day)
Location
Kansas City, KS
System Name Dell XPS 15 9560
Processor I7-7700HQ
Memory 32GB DDR4
Video Card(s) GTX 1050/1080 Ti
Storage 1TB SSD
Display(s) 2x Dell P2715Q/4k Internal
Case Razer Core
Audio Device(s) Creative E5/Objective 2 Amp/Senn HD650
Mouse Logitech Proteus Core
Keyboard Logitech G910
Wow, something mac is finally able to be hijacked, virused and all that junk. So much for the commercials

ZOMG 5 zillion spywares use it already! Wait, no, its proof of concept..

Is this windows only?

However, this is a QUICKTIME exploit, NOT OS X.

Huge difference. Thats like saying your flaw in AIM makes windows swiss cheese.

IE is an exception still...... because IE is so tightly integrated into windows.
 

mout12

New Member
Joined
Mar 23, 2006
Messages
114 (0.02/day)
Location
Reno
Dippy, go buy a Mac if you hate MS so much.
 

pt

not a suicide-bomber
Joined
Mar 11, 2006
Messages
8,956 (1.36/day)
Location
Portugal
Processor AMD Turion 64 X2 Mobile TL-60 (Trinidad)
Motherboard ASUS F3Ka (ATI RS690M)
Cooling stock
Memory Nanya 2x1GB ddr2 667@5-5-5-15-2T
Video Card(s) ATI Mobility Radeon HD2600 512MB DDR2@ 580mhz/486mhz
Storage 160GB on laptop+250GB external
Display(s) ASUS 15.4
Case Asus Laptop F3Ka chassis
Audio Device(s) on-board
Power Supply 1:30minutes battery
Software "genui xp", 'cause i hated vista
Joined
Aug 30, 2006
Messages
7,195 (1.12/day)
System Name ICE-QUAD // ICE-CRUNCH
Processor Q6600 // 2x Xeon 5472
Memory 2GB DDR // 8GB FB-DIMM
Video Card(s) HD3850-AGP // FireGL 3400
Display(s) 2 x Samsung 204Ts = 3200x1200
Audio Device(s) Audigy 2
Software Windows Server 2003 R2 as a Workstation now migrated to W10 with regrets.
I love it. I hope someone writes a virus to encryt all the iTunes files and hold them to ransom! By rights, iTunes would need to let the user have another copy of the file, right? Since they sell a license to listen... not a "one off download". That would bring iTunes administration to its knees. LOL
 
Joined
Jun 3, 2006
Messages
1,328 (0.20/day)
Location
London
I love it. I hope someone writes a virus to encryt all the iTunes files and hold them to ransom! By rights, iTunes would need to let the user have another copy of the file, right? Since they sell a license to listen... not a "one off download". That would bring iTunes administration to its knees. LOL

Nice idea. But i thought itunes works in a similar way to Steam? So you can download the music and use it on upto 5 registered pcs?
 

Wile E

Power User
Joined
Oct 1, 2006
Messages
24,318 (3.81/day)
System Name The ClusterF**k
Processor 980X @ 4Ghz
Motherboard Gigabyte GA-EX58-UD5 BIOS F12
Cooling MCR-320, DDC-1 pump w/Bitspower res top (1/2" fittings), Koolance CPU-360
Memory 3x2GB Mushkin Redlines 1600Mhz 6-8-6-24 1T
Video Card(s) Evga GTX 580
Storage Corsair Neutron GTX 240GB, 2xSeagate 320GB RAID0; 2xSeagate 3TB; 2xSamsung 2TB; Samsung 1.5TB
Display(s) HP LP2475w 24" 1920x1200 IPS
Case Technofront Bench Station
Audio Device(s) Auzentech X-Fi Forte into Onkyo SR606 and Polk TSi200's + RM6750
Power Supply ENERMAX Galaxy EVO EGX1250EWT 1250W
Software Win7 Ultimate N x64, OSX 10.8.4
Nice idea. But i thought itunes works in a similar way to Steam? So you can download the music and use it on upto 5 registered pcs?
Yep, but I don't think you can re-download them.
 

Jimmy 2004

New Member
Joined
Jan 15, 2005
Messages
5,458 (0.78/day)
Location
England
System Name Jimmy 2004's PC
Processor S754 AMD Athlon64 3200+ @ 2640MHz
Motherboard ASUS K8N
Cooling AC Freezer 64 Pro + Zalman VF1000 + 5x120mm Antec TriCool Case Fans
Memory 1GB Kingston PC3200 (2x512MB)
Video Card(s) Saphire 256MB X800 GTO @ 450MHz/560MHz (Core/Memory)
Storage 500GB Western Digital SATA II + 80GB Maxtor DiamondMax SATA
Display(s) Digimate 17" TFT (1280x1024)
Case Antec P182
Audio Device(s) Audigy 4 + Creative Inspire T7900 7.1 Speakers
Power Supply Corsair HX520W
Software Windows XP Home
Dippy, go buy a Mac if you hate MS so much.

You post that in almost every single news thread about M$, we get the idea. You love M$ and if anyone says a bad word about it obviously they hate it. :wtf:

Windows XP is a great operating system but it has its flaws, which people have a right to be unhappy about and criticise Microsoft for, but the advantages outweight the disadvantages so they still want to use it. If you get into a disagreement with your partner do you go and find someone else straight away? Just because you say something negative about a thing/person doesn't mean you dislike them.
 
Joined
Jul 1, 2005
Messages
5,197 (0.76/day)
Location
Kansas City, KS
System Name Dell XPS 15 9560
Processor I7-7700HQ
Memory 32GB DDR4
Video Card(s) GTX 1050/1080 Ti
Storage 1TB SSD
Display(s) 2x Dell P2715Q/4k Internal
Case Razer Core
Audio Device(s) Creative E5/Objective 2 Amp/Senn HD650
Mouse Logitech Proteus Core
Keyboard Logitech G910
Dippy, go buy a Mac if you hate MS so much.

I've got a macbook pro.

I run windows XP, Vista, and linux, while still managing to play WoW.

Virtualization software rules. I can have the benefits of program compatability, without the massive security flaws, and maintain a sandbox for windows to play in.
 

Graogrim

New Member
Joined
Jan 1, 2008
Messages
308 (0.05/day)
Location
East Coast US
System Name Paradigm
Processor i5 3570k
Motherboard MSI Z77A-G43
Cooling OEM
Memory 8 GB Corsair Vengeance DDR3 2133
Video Card(s) EVGA GeForce GTX 670 2 GB
Storage 128 MB Corsair M4 SSD + 1 TB WD Caviar Black
Display(s) Samsung 24"
Case Rosewill Challenger USB 3
Audio Device(s) Soundblaster X-Fi Titanium HD
Power Supply Corsair GS 800
Software Windows 7 64 bit
Virtualization software rules. I can have the benefits of program compatability, without the massive security flaws, and maintain a sandbox for windows to play in.
That's the theory.

I'd still advise caution, no matter how secure a system appears to be.
 
Joined
Jun 4, 2007
Messages
1,050 (0.17/day)
Location
indiana
Processor c2d e8400@ 3.8ghz 24/7
Motherboard Abit IP-35e 80$ lol
Cooling zalman cnps9700 led
Memory 2 x 2 gig patriot viper
Video Card(s) evga Gtx 285 oc
Storage 2 x 300gig sata seagate 7200.10 in raid 0/ 1.5TB for backup
Display(s) acer 24" TFT LCD AL2416WBSD
Case Antec 902
Audio Device(s) XtremeGamer Fatal1ty Pro series
Power Supply ocz gamextreme 700w
Software windows 7 ultimate
That's the theory.

I'd still advise caution, no matter how secure a system appears to be.

WOW nice way to wake up a zombie lol this thread is like a year old :laugh:
 

Graogrim

New Member
Joined
Jan 1, 2008
Messages
308 (0.05/day)
Location
East Coast US
System Name Paradigm
Processor i5 3570k
Motherboard MSI Z77A-G43
Cooling OEM
Memory 8 GB Corsair Vengeance DDR3 2133
Video Card(s) EVGA GeForce GTX 670 2 GB
Storage 128 MB Corsair M4 SSD + 1 TB WD Caviar Black
Display(s) Samsung 24"
Case Rosewill Challenger USB 3
Audio Device(s) Soundblaster X-Fi Titanium HD
Power Supply Corsair GS 800
Software Windows 7 64 bit
ROFL I didn't even look at the date. Blame the "similar posts" feature as it's the one that linked this thread right in my face.
 
Joined
Jun 4, 2007
Messages
1,050 (0.17/day)
Location
indiana
Processor c2d e8400@ 3.8ghz 24/7
Motherboard Abit IP-35e 80$ lol
Cooling zalman cnps9700 led
Memory 2 x 2 gig patriot viper
Video Card(s) evga Gtx 285 oc
Storage 2 x 300gig sata seagate 7200.10 in raid 0/ 1.5TB for backup
Display(s) acer 24" TFT LCD AL2416WBSD
Case Antec 902
Audio Device(s) XtremeGamer Fatal1ty Pro series
Power Supply ocz gamextreme 700w
Software windows 7 ultimate
Top