Fresh vulnerabilities plague QuickTime, Gmail |

......... .........<

Fresh vulnerabilities plague QuickTime, Gmail

3. January 2007, 4:50 Uhradmin

A cross-site scripting vulnerability revealed in Google’s Gmail was swiftly patched ove the holiday weekend, while the opening salvo in January’s Month of Apple Bugs proves to be significant for both Mac and Windows users.Apple’s QuickTime software has a highly serious bug that could leave Windows and Mac users open to attacks by malicious Web sites, according to a project aimed at disclosing Apple bugs throughout January.

The QuickTime flaw launches the Month of Apple Bugs (MOAB), which follows on from efforts such as the Month of Kernel Bugs and the Month of Browser Bugs. The bug was discovered by LMH, a MOAB organizer who hasn’t disclosed his name.

The flaw affects any Windows or Mac OS X bug with QuickTime Player Version 7.1.3 installed; previous versions are also probably vulnerable. The problem lies in the way QuickTime handles addresses beginning with “rtsp://”, and can be exploited to create a stack-based buffer overflow using HTML, JavaScript or a QTL file, LMH wrote.

www.techworld.com

Trackback-URL

Free Limewire

Free Limewire / P2P

A peer-to-peer (or P2P) computer network relies primarily on the computing power and bandwidth of the participants in the network rather than concentrating it in a relatively low number of servers. P2P networks are typically used for connecting nodes via largely ad hoc connections. Such networks are useful for many purposes. Sharing content files (see file sharing) containing audio, video, data or anything in digital format is very common, and realtime data, such as telephony traffic, is also passed using P2P technology.A pure peer-to-peer network does not have the notion of clients or servers, but only equal peer nodes that simultaneously function as both "clients" and "servers" to the other nodes on the network. This model of network arrangement differs from the client-server model where communication is usually to and from a central server. A typical example for a non peer-to-peer file transfer is an FTP server where the client and server programs are quite distinct, and the clients initiate the download.