Flaws in Quicktime. Update Available from Apple

The machines we love to hate

Moderator: Wiz Feinberg

User avatar
Wiz Feinberg
Posts: 6113
Joined: 8 Jan 1999 1:01 am
Location: Mid-Michigan, USA

Flaws in Quicktime. Update Available from Apple

Post by Wiz Feinberg »

A rather important security update has been issued by Apple and covers a lot of issues. For the sake of brevity, I'll just focus on the one that could affect both Windows and Apple users. Apparently, flaws in QuickTime leave both Windows and Mac OS X computers at risk for compromise. The vulnerabilities affects the way the ever popular media player software handles certain files. Apple has released a security advisory regarding this matter. Anyone who hasn't done so should update to Quicktime 7.1 as soon as possible either via Software Update or from the Apple download website.

------------------
Bob "Wiz" Feinberg
Moderator of the SGF Computers Forum
<small>Visit my Wiztunes Steel Guitar website at: http://www.wiztunes.com/
or my computer troubleshooting website: Wizcrafts Computer Services,
or my Webmaster Services webpage.
Learn about current computer virus and security threats here.
Read Wiz's Blog for security news and update notices</small>

Chip Fossa
Posts: 4366
Joined: 17 Sep 1998 12:01 am
Location: Monson, MA, USA (deceased)

Post by Chip Fossa »

Wiz,

Am I looking in the wrong place, or do you have to download iTunes as part of QT 7.1?

I downloaded to a download folder [did not install yet] and the file says "iTunes Installer Version 6.0.4.2 - says nothing about QT - kind of a big file [35.5MB].

I don't really want or need iTunes, and I suspect a large portion of those 35MBs is devoted to iTunes.

Is this the only way to update to QT 7.1?
User avatar
Wiz Feinberg
Posts: 6113
Joined: 8 Jan 1999 1:01 am
Location: Mid-Michigan, USA

Post by Wiz Feinberg »

Chip;
Sorry bout that chief!

I posted this notice as soon as I became aware of the problem and the patched version, and yes, it does contain the iTunes installer. Later on I read another security brief about Quicktime and obtained a link to the Apple standalone version, which I posted on my Security Blog.

Here is the link to the standalone updated version of Quicktime: http://www.apple.com/quicktime/download/standalone.html
Chip Fossa
Posts: 4366
Joined: 17 Sep 1998 12:01 am
Location: Monson, MA, USA (deceased)

Post by Chip Fossa »

Thanks Wiz,

That did the trick. Much better.

I don't mean to hijack this thread, but I noticed in Firefoxe's "DOWNLOADS", when QT was downloading, that I have about 30 or so previous downloads listed in there.

Are these, also eating up MBs, and should I CLEAN them out? Maybe I should get rid of all the DLs I have in my Downloads folder, too. There are 30 files in there at 126MB.

I keep them, in case I have to uninstall/reinstall something.
User avatar
Wiz Feinberg
Posts: 6113
Joined: 8 Jan 1999 1:01 am
Location: Mid-Michigan, USA

Post by Wiz Feinberg »

Chip;
Those items in the downloads popup list are shortcuts to downloaded files. If you no longer need a link delete it. If you don't need any of the displayed download links use the Cleanup button. It removes them all at once. You can also automate this process by going to Tools > Options > Privacy > "The Clear Private Data tool ..." > Settings: check the items you want removed when you close all instances of Forefox. The last option will popup a box asking what you want deleted, when you close FF. If you leave it unchecked that won't happen; the deletions will be silent and instant. Click OK to save your choices.

------------------
Bob "Wiz" Feinberg
Moderator of the SGF Computers Forum
<small>Visit my Wiztunes Steel Guitar website at: http://www.wiztunes.com/
or my computer troubleshooting website: Wizcrafts Computer Services,
or my Webmaster Services webpage.
Learn about current computer virus and security threats here.
Read Wiz's Blog for security news and update notices</small>

Chip Fossa
Posts: 4366
Joined: 17 Sep 1998 12:01 am
Location: Monson, MA, USA (deceased)

Post by Chip Fossa »

Thanks again, Wiz. Much appreciated.