Quicktime vulnerability (again)

[Gary]

"A vulnerability in Apple QuickTime, which potentially can be exploited by malicious people to compromise a user's system.

The vulnerability is caused due to a boundary error when handling RTSP replies and can be exploited to cause a buffer overflow via e.g. sending a specially crafted reply containing an overly-long "Reason-Phrase".

Successful exploitation may allow execution of arbitrary code, but requires that the user is e.g. tricked into opening a malicious QTL file or visiting a malicious web site.

The vulnerability is reported in version 7.3.1.70. Other versions may also be affected" quoted from Secunia

[Lance]

I only updated my XP machine last weekend to the newest version. Argh!

Thanks for the heads up Gary.

[Gary]

Sorry about the spelling but its a real pain just as you patch, a new hole appears

[Lance]

Sorry about the spelling

Took me a minute to realise where you meant, but as if by magic...

[Gary]

Took me a minute to realise where you meant, but as if by magic...

Cheers Lance