Apple Computer issued on Friday a security advisory and fix for a QuickTime flaw that the company describes as a minor issue, but which is classified as a serious problem by the firm that found the vulnerability.
Apple said the flaw in the QuickTime movie player for Mac OS X could cause the player to crash. "Playing a malformed .mov (movie) file could cause QuickTime to terminate," Apple said in an advisory published on late Friday afternoon.
The company that found and reported the flaw to Apple in February, eEye Digital Security, claimed Apple is downplaying the seriousness of the flaw in its advisory. A movie file could be created, the firm maintained, that would cause malicious code to execute when the user opened the file.
"We told them that if you are not able to execute code then talk to us, so we can show you the issues," said Marc Maiffret, chief hacking officer for eEye Digital Security.
An Apple representative could not be reached for comment.
Since movie files are not generally thought to carry code, the flaw could be used to disguise a virus or Trojan horse program and lure unsuspecting Mac users into running the program.
Apple released an update to QuickTime earlier Friday morning but didn't publish a security advisory until eEye discovered that Apple had patched the security flaw in the software update. When the company contacted Apple, the computer maker agreed to issue a security advisory as well.
"You just can't put out a patch without an advisory, because then the bad guys will look at the binary and find the flaw," said Maiffret. "You need to tell people, or else you are doing your customers a disservice."
Web giant is spending $120 million to beef up its Mountain View, Calif., headquarters, according to filings with the city reviewed by the San Jose Mercury News.
The Samsung Galaxy Mini 2 S6500 could make its debut at the Mobile World Congress in Barcelona later this month, according to a leaked promotional image.
MIT creates a simulation to celebrate the 50th anniversary of Spacewar. A relic of the early days of minicomputers, it was one of the first computer video games and set the stage for many others, including Asteroids.
Join the conversation