Welcome to the Second Life Forums Archive

These forums are CLOSED. Please visit the new forums HERE

QuickTime makes a security hole in SL

Zonax Delorean
Registered User
Join date: 5 Jun 2004
Posts: 767
03-14-2006 07:06
http://www.eeye.com/html/research/upcoming/20060307a.html
http://www.eweek.com/article2/0,1895,1936596,00.asp
From: someone

Researchers at eEye Digital Security have pinpointed two high-risk vulnerabilities in iTunes and QuickTime that could put millions of Windows and Mac users at risk of code execution attacks.
[...]
In the meantime, users are urged to avoid clicking on untrusted media files.


Since in SL, you do NOT have to 'click' on a (video) media file, as it automatically loads itself, I guess this can be considered unsafe, too, both on the PC and the Mac :-(

Let's hope Apple fixes this real soon!
_____________________
Ordinal Malaprop
really very ordinary
Join date: 9 Sep 2005
Posts: 4,607
03-14-2006 07:21
I'd be immensely surprised if whatever thing that this being talked about here (very vaguely) could get through its translation via the SL client. This sounds like a vulnerability in the Quicktime client itself.
Aliasi Stonebender
Return of Catbread
Join date: 30 Jan 2005
Posts: 1,858
03-14-2006 10:14
Yeah; SL is just using the Quicktime codec, within its own client (in the same manner Quicktime Alternative does). So while it's possible we have a hole (and I hope LL is looking into that), we might not!

But in the meantime, it doesn't hurt to keep that option checked off, I'd suppose.
_____________________
Red Mary says, softly, “How a man grows aggressive when his enemy displays propriety. He thinks: I will use this good behavior to enforce my advantage over her. Is it any wonder people hold good behavior in such disregard?”
Anything Surplus Home to the "Nuke the Crap Out of..." series of games and other stuff