Last week, the computer security company Trend Micro had disclosed the presence of two new flaws of QuickTime 7 for Windows, claiming that Apple had been informed of the threats last November. To the Cupertino technical time they had responded to the security company had no plans for a possible release of a corrective patch, adding that the software would become shortly thereafter deprecated on Windows.
Today still lacks the official announcement, but some company spokesman told the Wall Street Journal that it's all true: QuickTime is essentially deprecated on Windows. This means that the company will never release more official update on the software and the two flaws discovered by Trend Micro will remain uncovered. Whereas available to the public will not take long because the attackers exploit to gain access to vulnerable computers.
Trend Micro was able to trigger certain heap overflow (occurs with an excess of input data in the memory heap) directing QuickTime to a malicious website or reproducing an infected file. In this way, the cracker can gain access to the machine and the possibility to execute malicious code remotely. It is a practical abused by cyber-criminals that can install malware, such as for the collection of data, on a target computer.
This is why the security company and US government agencies suggest to uninstall QuickTime on Windows, although there are not yet evidence of machines attacked through this particular exploit. With the software that is now deprecated on Windows, and with the latest update that goes back about three months ago, users had better uninstall QuickTime on your computer to prevent unwanted intrusions over time.
Today still lacks the official announcement, but some company spokesman told the Wall Street Journal that it's all true: QuickTime is essentially deprecated on Windows. This means that the company will never release more official update on the software and the two flaws discovered by Trend Micro will remain uncovered. Whereas available to the public will not take long because the attackers exploit to gain access to vulnerable computers.
Trend Micro was able to trigger certain heap overflow (occurs with an excess of input data in the memory heap) directing QuickTime to a malicious website or reproducing an infected file. In this way, the cracker can gain access to the machine and the possibility to execute malicious code remotely. It is a practical abused by cyber-criminals that can install malware, such as for the collection of data, on a target computer.
This is why the security company and US government agencies suggest to uninstall QuickTime on Windows, although there are not yet evidence of machines attacked through this particular exploit. With the software that is now deprecated on Windows, and with the latest update that goes back about three months ago, users had better uninstall QuickTime on your computer to prevent unwanted intrusions over time.
Comments
Post a Comment