Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

MacRumors

macrumors bot
Original poster


Apple issued a security update for Mac OS X today. The update specifically addresses a possible security flaw in Quicktime:

Impact: Visiting malicious websites may lead to arbitrary code execution

Description: A buffer overflow exists in QuickTime's handling of RTSP URLs. By enticing a user to access a maliciously-crafted RTSP URL, an attacker can trigger the buffer overflow, which may lead to arbitrary code execution.

http://docs.info.apple.com/article.html?artnum=304989

A proof of concept exploting this bug was published at the Month of Apple Bugs site.
 
This is from the Month of Apple Bugs business, on the second day of January.

Glad to see that they're fixing something.
 
Still there's no update for the iTunes/iPod error-48. 🙁

My Nano just doesn't want to get along with iTunes.
 
Needs 10.4.8

Guess I can't install it, beacause I don't want to use the turd that it 10.4.8 (my opinion). It has caused me nothing but grief. I stick with 10.4.5 for now.
 
Ooooh yeah, I forgot about the Month of Apple Bugs. Hm, well, updates are spiffy and it shows Apple is on top of this I guess.
 
I see that the Month of "Apple" Bugs has a bunch of days with bugs in shareware like Colloquy... or with no bugs at all. (To say nothing of whether such bugs are practical to actually do harm with anyway.)

No wonder MOAB vanished from the press.

Still good to see benefits coming from the project... even if the flaws were released in the wrong way (released to crackers and the public without releasing to the vendor for a fix first).
 
10.4.8

Huh? What issues have you had with 10.4.8?

so many bizarre issues, such as spontaneously quitting the finder and bringing me to the login window, must have reinstalled half a dozen times. I've seen a handful of machines with strange behavior after the upgrade, and quite a few that were fine. After 10.4.6 gave me trouble with my FullPress servers, I have found that 10.4.5 is fine for me for now.
 
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.