Apple Fixes QuickTime Security Vulnerability – But NOT for Windows!

 

The Month of Apple Bugs website’s first vulnerability posting was "Apple Quicktime rtsp URL Handler Stack-based Buffer Overflow" — an attacker could overflow a stack-based buffer, using either HTML, Javascript or a QTL file as attack vector, leading to an exploitable remote arbitrary code execution condition.

SOLUTION AT THAT TIME: "The only potential workaround would be to disable the rtsp:// URL handler, uninstalling Quicktime or simply live with the feeling of being a potential target for pwnage."

Secunia recently tested Apple’s QuickTime 7.1.3 update and found that the fix was only implemented in the Macintosh version of QuickTime and NOT the version relased for Microsoft Windows (even though Apple’s version numbers and patches are identical)

YOUR SOLUTION TODAY?: Disable QuickTime’s rtsp:// URL handler

1. From the Windows Control Panel, <Double-Click> QuickTime
2. <Click> on the Files Types Tab
3. <Click> Streaming – Streaming Movies
4. <Uncheck Box> RSTP stream descriptor
5. <Click> OK
6. Wait until Apple Fixes the problem