Security Firm: Apple Is Trying To Downplay The Importance Of A Flaw In Quicktime

snoopy · Jun 25, 2012

Security Firm: Apple Is Trying to Downplay the Importance of a Flaw in QuickTime

Security Explorations, the company that has recently found vulnerabilities in digital satellite TV equipment, has identified a bug in QuickTime. The firm catalogs it as a security hole, but the results of Apple’s evaluation state otherwise.

The organization has made available a proof of concept, calling out to other members of the industry to share some insight on whether they agree that it’s a vulnerability, or simply a “hardening issue,” as Apple calls it.

The researchers state that the flaw, reported on April 12, 2012, could allow an attacker to bypass a couple of security checks in QuickTime’s code. Furthermore, they believe that if it’s combined with another vulnerability that impacts Oracle’s Java SE, it could lead to the complete compromise of a Java VM environment, even on a fully patched system.

“The problem is that Apple seems to be downplaying the importance of a bug. They stick to treating it as a ‘security hardening’ issue or as a ‘security hardening enhancement’,” Adam Gowdiak, CEO of Security Explorations, told Softpedia. “Since they do not treat it as a bug, they neither inform users about the fixes / nor credit reporting researchers for bringing the issue to company's attention.”
Click to expand...

More here: http:/ ews.softpedia.com ews/Security-Firm-Apple-Is-Trying-to-Downplay-the-Importance-of-a-Flaw-in-QuickTime-277460.shtml

Log in or Sign up

Security Firm: Apple Is Trying To Downplay The Importance Of A Flaw In Quicktime

snoopy Registered Members

Share This Page

Log in or Sign up

Security Firm: Apple Is Trying To Downplay The Importance Of A Flaw In Quicktime

snoopy Registered Members

Share This Page

Useful Searches