Comments on: Another QuickTime RTSP flaw announced

This QuickTime buffer overflow vulnerability appears to be different from a similar vulnerability patched by Apple in December 2007.

[mjm01010101]

Assume the protocol is flawed

There has been a vuln found in quicktime every month ever since release. Assume the protocol and player are therefore flawed.

[sjkx]

flawed assumption

Just because a protocol has security vulnerabilities doesn't imply
it's flawed, especially if it wasn't designed to be secure. Using your
"logic" many Internet protocols (including TCP and IP) are flawed.

[Ilgaz]

RTSP is the industry accepted standard (even for MS!)

The "Protocol" isn't flawed, its implementation (one of many!) has
issue. If Apple acts late again, whole web will be full of "uninstall
quicktime" advices which will hurt many things such as
mpeg4/h264 standard adoption.

[fred dunn]

Apple said "Sometime in Early 2008"....

What a real help. It appears they are more concerned with showing new products and Steve Job's ego than with security.