Comments on: Microsoft to patch new DirectX hole

New hole in DirectX could allow an attacker to take control of a computer if the user visits a site and runs a maliciously crafted QuickTime file.

Add a Comment (Log in or register) (16 Comments)

by Vegaman_Dan May 28, 2009 2:56 PM PDT

An Apple Quicktime file is the exploit vector to compromise a Windows system. Oh my, the fanboys are going to just have all sorts of fun with this one spinning back and forth.

Let the flamewars begin- I have marshmellows.

Like this Reply to this comment


by rhsc May 28, 2009 3:40 PM PDT: We've been calling it the quicktime virus for years; Like this


by 01Phyxius May 28, 2009 3:49 PM PDT: @rhsc:
It's a pretty well known fact that QuickTime on windows needs to die. However, having said that, I'd like to see what the Mac fanboys are going to say about it.; Like this


by Seaspray0 May 29, 2009 9:45 AM PDT: Ever since quicktime started loading other software, it was removed from my computers. So far, I haven't run into any circumstances where I needed it.; Like this


by monkeyfun14 May 28, 2009 3:47 PM PDT: Quicktime is the IE of media players; Like this Reply to this comment

by shellcodes_coder May 28, 2009 5:10 PM PDT

This hole can only be exploited if you have CrApple SlowTime aka BloatTime installed and I don't have any crap wares from CrApple installed and will neither install

Like this Reply to this comment


by catbutt5 May 29, 2009 12:43 AM PDT: The exploit does not affect QuickTime - the player. It affects MS DirectShow when opening a malicious file masquerading as a QuickTime file. That's why MS is fixing it... not Apple.

Note: You don't have to have QuickTime installed to be affected.; Like this


by Seaspray0 May 29, 2009 9:50 AM PDT: @catbutt5. Files are opened according to what application is associated with the extension. If you have quicktime loaded, quicktime files will be loaded by quicktime.; Like this


by damesJ May 28, 2009 5:17 PM PDT: hahahaha i think its funny how everyone gets so defensive over a stupid hole. every operating system has bugs and holes. as long as apple and microsoft fix them who cares?; Like this Reply to this comment


by monkeyfun14 May 28, 2009 5:24 PM PDT: This doesn't affect Vista so im good.; Like this Reply to this comment


by B-Ri May 28, 2009 6:10 PM PDT: MS will fail to patch the real hole that is responsible since that is the one that is sitting in front of the computer. But this is yet another answer for all those who say that they have no reason to upgrade to Vista or 7.; Like this Reply to this comment

by May 29, 2009 6:59 AM PDT

Apple good, Quicktime not so.

Like this Reply to this comment


by Vegaman_Dan May 29, 2009 9:09 AM PDT: If it were not for movie trailers released in Quicktime format, would it even be still around?

I had to think about what Quicktime is used for these days and ... .yeah. Most people have moved on to YouTube or other services.

is it time for Quicktime to go away?; Like this


by mnl1121 May 29, 2009 10:34 AM PDT: Alls I have to say is +1 for Vista!; Like this Reply to this comment


by howardisme May 29, 2009 7:29 PM PDT: http://news.cnet.com/8301-1009_3-10251544-83.html?part=rss&subj=news&tag=2547-1009_3-0-20, the fix it diaogue box does not work. No links!; Like this Reply to this comment


by fdunn3 June 3, 2009 4:50 AM PDT: Microsoft is not doing anyone a service by patching the Directshow flaw. It is obvious that it is of no value and just another vector to be compromised otherwise MS would have continued DirectShow support for QT files beyond Windows XP, which they did not.

I don't understand the rational behind fixing DirectShow and contuing to support the file class. They should just remove it from the DirectShow supported filetypes and leave it at that.

If anybody wants to play a QT file then let them install QuickTime and keep it updated.

I think this is a very bad move on MSs side.; Like this Reply to this comment

(16 Comments)

About Security

Online security is threatened by more than hacking and phishing attempts. Check here for the latest updates on software vulnerabilities, data leaks, and rapidly spreading viruses--and learn how to protect your systems.