Maker tech hub — AI · 3D print · Pi · ESP32 · plus the classic tech archive.

Free ESP32 kit · Books · Network Ninja · Archive

Avery J. Parker Practical maker tech — AI tools, 3D printing, Raspberry Pi & ESP32
Classic tech archive. From the original averyjparker.com tech blog — historical context; pair with modern guides where noted. Full archive · Maker projects · Network Ninja

Classic tip · Classic

Quicktime and iTunes vulnerabilities

· · Computers , Security , Software

Details of a vulnerability in Apple's Quicktime and iTunes reported at betanews.com. Secunia also has an advisory. It is listed as moderately critical and affects the current version of both quicktim…

Written by

Avery J. Parker

IT veteran, maker educator, and author of Network Ninja, 3D Printing Mastery, and AI Workflow Mastery. Business IT: Diversified Tech Solutions.

Details of a vulnerability in Apple's Quicktime and iTunes reported at betanews.com. Secunia also has an advisory. It is listed as moderately critical and affects the current version of both quicktime and itunes on Mac or Windows.


It sounds like a specially crafted .mov file could trigger a heap overflow and allow arbitrary code execution.

The current solution is not to open .mov files from untrusted sources. These days ANY program that opens files from outside your control can be susceptible to attacks, make sure to keep track of any relevant updates for your software. At this time there is no update available, hopefully there will be soon.

Related