"If the client is using Internet Explorer, the shell code is written to a heap area for later use."


"If QuickTime ActiveX controls in Internet Explorer and plug-ins in Firefox are disabled, the exploit will not work."



NOWHERE does this article say ANYTHING about Macs being affected.

Of course Symantec recommends: "Symantec antivirus products with the latest definitions will detect this threat as Trojan.Quimkids."

/cough

From the original CW article, linked in the first paragraph...

"But even though analysts confirmed on Monday that Mac OS X versions of QuickTime 7.2 and later are also vulnerable, it took several more days for other researchers to craft a reliable exploit."

...

"According to the proof-of-concept, the Metasploit module works on Intel- and PowerPC-based Macs running either Mac OS X 10.4 (Tiger) or 10.5 (Leopard). It also executes on PCs running Windows XP SP2."

They say it can happen with OS X but yet there isn't a single description of HOW it can happen in OS X.

Another Apple security hole. Where exactly does the "designed for security from the ground up" come into play with Apple's software?

Quote

daemon wrote:
Another Apple security hole. Where exactly does the "designed for security from the ground up" come into play with Apple's software?

The same way that a car designed for safety can still have faults?? The Unix basis of OS X is fundamentally a better model than classic Mac OS, or Windows. Mac OS system 9 closed the gap considerably, as did XP SP2 and Vista on Windows, but neither of those systems had been designed as a secure networked system in the first place.

Which isn't to defend them in this case - Quicktime seems to be the single most insecure piece of software Apple have produced.

daemon is trolling again.

Am I reading the article at Symantic correctly that this exploit requires Explorer or FireFox? I didn't see where it affects Safari.