Comments on: 0DAY: QuickTime pwns Firefox http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/ Information Security Think Tank Fri, 21 Nov 2008 20:28:04 +0000 http://wordpress.org/?v=2.6.3 By: Google Chrome Options | GNUCITIZEN http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-123763 Google Chrome Options | GNUCITIZEN Thu, 18 Sep 2008 13:50:59 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-123763 [...] far too many applications that misbehave when launching links. QuickTime is one of them. Remember QuickTime Pwns Firfox? Mozilla has discontinued the -chrome command line option in order to prevent similar attacks from [...] [...] far too many applications that misbehave when launching links. QuickTime is one of them. Remember QuickTime Pwns Firfox? Mozilla has discontinued the -chrome command line option in order to prevent similar attacks from [...]

]]> By: More on GIFARS and Other Dangerous Attacks | GNUCITIZEN http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-123180 More on GIFARS and Other Dangerous Attacks | GNUCITIZEN Mon, 04 Aug 2008 06:45:42 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-123180 [...] way you look at it, SUN has to do something about the issue. Perhaps, what Firefox did to prevent this exploit from working. » more | » comments rss | posted by pdp | syndication and [...] [...] way you look at it, SUN has to do something about the issue. Perhaps, what Firefox did to prevent this exploit from working. » more | » comments rss | posted by pdp | syndication and [...]

]]> By: radioxid http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-118391 radioxid Tue, 08 Apr 2008 13:05:57 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-118391 The alert doesn't work anymore on FF 20013... The alert doesn’t work anymore on FF 20013…

]]> By: sachinKT http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-115935 sachinKT Wed, 05 Mar 2008 18:33:43 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-115935 i dont know but some hacks are not working... i dont know but some hacks are not working…

]]> By: Technology latest news » Blog Archive » Mozilla fixes QuickTime flaw in Firefox (InfoWorld) http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-115752 Technology latest news » Blog Archive » Mozilla fixes QuickTime flaw in Firefox (InfoWorld) Sat, 01 Mar 2008 09:39:16 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-115752 [...] bug in the way the Firefox browser works with QuickTime media files. The flaw, which was reported last week by hacker Petko Petkov, gives attackers a way to run unauthorized commands on a [...] [...] bug in the way the Firefox browser works with QuickTime media files. The flaw, which was reported last week by hacker Petko Petkov, gives attackers a way to run unauthorized commands on a [...]

]]> By: tapasman http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-77761 tapasman Tue, 27 Nov 2007 17:30:12 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-77761 opps IE 6 and QT 6.0 opps IE 6 and QT 6.0

]]> By: tapasman http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-77760 tapasman Tue, 27 Nov 2007 17:29:18 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-77760 sweet so none of these execute on my system,*shaking fist ala Homer* unless you have something hidden. thanks for the info and sorry you did not get credit for it. I know how you feel I have discovered close to 10 new unknown virueses and hacks and got no credit, oh well atleast my co-workers know. sweet so none of these execute on my system,*shaking fist ala Homer* unless you have something hidden. thanks for the info and sorry you did not get credit for it. I know how you feel I have discovered close to 10 new unknown virueses and hacks and got no credit, oh well atleast my co-workers know.

]]> By: pissedoff? http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-75869 pissedoff? Fri, 23 Nov 2007 09:24:47 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-75869 your beyonce is not malicious?what about this received by AV?: Threat: Bloodhound.Exploit.161 your beyonce is not malicious?what about this received by AV?:

Threat: Bloodhound.Exploit.161

]]> By: Assyren http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-73920 Assyren Mon, 19 Nov 2007 20:46:29 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-73920 I´m using Windows XP sp2 IE but it´s not working the song 1.mp3 is runing but the calc.exe is not working i use this code what should i change so it will work ? thanx I´m using Windows XP sp2 IE
but it´s not working the song 1.mp3 is runing but the calc.exe is not working i use this code

what should i change so it will work ?
thanx

]]> By: Francoise MAHENC http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-66385 Francoise MAHENC Tue, 06 Nov 2007 21:56:27 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-66385 What do I do now? One week ago, I got a Trojan, my Word documents were erratic, the Firewall antivirus detected nothing..MS were of no help beyond checking that my softwares were legal. I first got a paid Plus version of my AdAware, which promptly got erratic too, but detected and deleted a MRU. After I had tried to watch a YouTube [professional] video, I had noticed a QT icone come out of nowhere [my son installed iTunes on my laptop, which I never use - and Yes, I browse as an administrator, not knowing any better]. After AdAware, I also switched to Firefox, feeling fed-up with MS generally, and from checking on NoScript, I now got on your QT bug page - it tallies. WHAT DO I DO NOW? I guess this is of no interest to you [except as further proof on Windows users being morons!]but please direct me to people who can answer me: you are the only source of clear information I could get till now. Sorry to bother you, thank you for your activity - and thank you in advance if you can direct me. Francoise Mahenc What do I do now? One week ago, I got a Trojan, my Word documents were erratic, the Firewall antivirus detected nothing..MS were of no help beyond checking that my softwares were legal. I first got a paid Plus version of my AdAware, which promptly got erratic too, but detected and deleted a MRU. After I had tried to watch a YouTube [professional] video, I had noticed a QT icone come out of nowhere [my son installed iTunes on my laptop, which I never use - and Yes, I browse as an administrator, not knowing any better]. After AdAware, I also switched to Firefox, feeling fed-up with MS generally, and from checking on NoScript, I now got on your QT bug page - it tallies. WHAT DO I DO NOW? I guess this is of no interest to you [except as further proof on Windows users being morons!]but please direct me to people who can answer me: you are the only source of clear information I could get till now. Sorry to bother you, thank you for your activity - and thank you in advance if you can direct me. Francoise Mahenc

]]> By: Tech News » Blog Archive » Firefox Update Patches Quicktime Flaw http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-65561 Tech News » Blog Archive » Firefox Update Patches Quicktime Flaw Mon, 05 Nov 2007 20:53:54 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-65561 [...] flaw is technically in Quicktime and affects the Internet Explorer as well, though Petkov says on his blog that IE’s security policies make the flaw less [...] [...] flaw is technically in Quicktime and affects the Internet Explorer as well, though Petkov says on his blog that IE’s security policies make the flaw less [...]

]]> By: Alanat News » Unpatched QuickTime Bug Threatens Firefox http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-64453 Alanat News » Unpatched QuickTime Bug Threatens Firefox Fri, 02 Nov 2007 23:14:06 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-64453 [...] D. Petkov, a penetration tester, «www.gnucitizen.org» that the “vulnerability can lead to a full compromise of the browser and maybe even [...] [...] D. Petkov, a penetration tester, «www.gnucitizen.org» that the “vulnerability can lead to a full compromise of the browser and maybe even [...]

]]> By: Oldboy http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-61235 Oldboy Wed, 24 Oct 2007 20:31:21 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-61235 Real through this vulnerability to load exe through the URL? Real through this vulnerability to load exe through the URL?

]]> By: Firefox 2.0.0.7 QuickTime-related Issue | Slaptijack http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-59656 Firefox 2.0.0.7 QuickTime-related Issue | Slaptijack Fri, 19 Oct 2007 17:43:40 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-59656 [...] issue, first reported by Petko D. Petkov, could allow a remote attacker to launch Firefox with the privileges of the local user. This would [...] [...] issue, first reported by Petko D. Petkov, could allow a remote attacker to launch Firefox with the privileges of the local user. This would [...]

]]> By: More on the URI Protocol Handing Flaw (WinXP+IE7) « Visible Procrastinations http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-57396 More on the URI Protocol Handing Flaw (WinXP+IE7) « Visible Procrastinations Fri, 12 Oct 2007 03:02:51 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-57396 [...] Flaw (WinXP+IE7) Published October 12th, 2007 microsoft , security First we had the Quick time QTL/URI issue, then the Acrobat URI and rumors of more exploits which were all 3rd party problems from the [...] [...] Flaw (WinXP+IE7) Published October 12th, 2007 microsoft , security First we had the Quick time QTL/URI issue, then the Acrobat URI and rumors of more exploits which were all 3rd party problems from the [...]

]]> By: electrobrain » Blog Archive » Schwachstelle im ‘QuickTime-Plugin’ http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-56624 electrobrain » Blog Archive » Schwachstelle im ‘QuickTime-Plugin’ Tue, 09 Oct 2007 08:20:25 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-56624 [...] Originalmeldung: http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox [...] [...] Originalmeldung: http://www.gnucitizen.org/blog.....ns-firefox [...]

]]> By: Two Updates + Two Unpatched Vulnerabilities - TrendLabs | Malware Blog - by Trend Micro http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-56416 Two Updates + Two Unpatched Vulnerabilities - TrendLabs | Malware Blog - by Trend Micro Mon, 08 Oct 2007 16:48:50 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-56416 [...] the latest QuickTime version 7.2.0.240 (still unpatched). Related Links: Mozilla Vulnerability Page Petko D. Petkov’s Blog CVE [...] [...] the latest QuickTime version 7.2.0.240 (still unpatched). Related Links: Mozilla Vulnerability Page Petko D. Petkov’s Blog CVE [...]

]]> By: Apple fixes Quicktime flaw on Windows Vista, XP - VISTA.BLORGE.com http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-54976 Apple fixes Quicktime flaw on Windows Vista, XP - VISTA.BLORGE.com Thu, 04 Oct 2007 08:39:06 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-54976 [...] situation prompted Petkov to post proof-of-concept exploit in his blog last month. According to Petkov, “the result of this vulnerability can lead to full compromise of [...] [...] situation prompted Petkov to post proof-of-concept exploit in his blog last month. According to Petkov, “the result of this vulnerability can lead to full compromise of [...]

]]> By: je http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-53743 je Sat, 29 Sep 2007 15:37:46 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-53743 This was fixed with the release of version 2.0.0.7, though. This was fixed with the release of version 2.0.0.7, though.

]]> By: T e c h n o L o g i c » 2.0.0.7: Firefox’a QuickTime yaması http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox/#comment-53456 T e c h n o L o g i c » 2.0.0.7: Firefox’a QuickTime yaması Fri, 28 Sep 2007 16:53:34 +0000 http://www.gnucitizen.org/blog/0day-quicktime-pwns-firefox#comment-53456 [...] açığını yamıyor. Geçen hafta Petko Petkov isimli bir bilgisayar korsanı tarafından tespit edilen ve Firefox’un QuickTime media dosyalarıyla çalışması sırasında ortaya çıkan kritik [...] [...] açığını yamıyor. Geçen hafta Petko Petkov isimli bir bilgisayar korsanı tarafından tespit edilen ve Firefox’un QuickTime media dosyalarıyla çalışması sırasında ortaya çıkan kritik [...]

]]>