Comments on: QuickTime 0day for Vista and XP http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/ Cutting-edge Think tank | Ethical Hacker Outfit Sun, 20 Jul 2008 22:04:09 +0000 http://wordpress.org/?v=2.5.1 By: Giuseppe Cascone » Blog Archive » QuickTime 0day for Vista and XP http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-122901 Giuseppe Cascone » Blog Archive » QuickTime 0day for Vista and XP Wed, 09 Jul 2008 12:37:35 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-122901 [...] see video click) Because we are an information security think tank and because we encounter some very interesting [...] [...] see video click) Because we are an information security think tank and because we encounter some very interesting [...]

]]> By: Antonio Trigiani iBlog - Informatica Virale » Blog Archive » Video: Vulnerabilità QuickTime 0day su Windows Vista e XP http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-121397 Antonio Trigiani iBlog - Informatica Virale » Blog Archive » Video: Vulnerabilità QuickTime 0day su Windows Vista e XP Sat, 10 May 2008 17:52:45 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-121397 [...] sicurezza, Video | Il team di Gnucitizen mostra in questo video come sfruttare la vulnerabilità 0day di QuickTime su Windows Vista e Windows [...] [...] sicurezza, Video | Il team di Gnucitizen mostra in questo video come sfruttare la vulnerabilità 0day di QuickTime su Windows Vista e Windows [...]

]]> By: Quicktime Flaw Makes Windows Vulnerable to Attack | Networking for Networkers http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120835 Quicktime Flaw Makes Windows Vulnerable to Attack | Networking for Networkers Mon, 05 May 2008 16:58:44 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120835 [...] PCs running Windows Vista SP1 and XP SP2. Although details are a bit thin at the moment, the GNUCitizen blog has published a movie purporting to show the attack in [...] [...] PCs running Windows Vista SP1 and XP SP2. Although details are a bit thin at the moment, the GNUCitizen blog has published a movie purporting to show the attack in [...]

]]> By: Ix http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120563 Ix Fri, 02 May 2008 13:38:13 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120563 Seconding Jim's question. Knowing it exists is important, knowing what's being done about it is even more important. Seconding Jim’s question. Knowing it exists is important, knowing what’s being done about it is even more important.

]]> By: Jim Manico http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120414 Jim Manico Thu, 01 May 2008 04:13:13 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120414 Inquiring minds want to know. Can you at least let us know how Apple is reacting to this exploit? Inquiring minds want to know. Can you at least let us know how Apple is reacting to this exploit?

]]> By: flashdrive http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120409 flashdrive Thu, 01 May 2008 00:03:47 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120409 when can we expect to see how this is done? when can we expect to see how this is done?

]]> By: GNUCitizen: QuickTime for Windows Vista and XP Leakage Leads to Inevitable Badness | Infosecurity.US http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120408 GNUCitizen: QuickTime for Windows Vista and XP Leakage Leads to Inevitable Badness | Infosecurity.US Wed, 30 Apr 2008 23:57:22 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120408 [...] Quicktime on Microsoft WIndows Vista and XP only. See the full announcement on the GNUCitizen site here. Current Workarounds include….Not opening up attachments from unknown sources. Sphere: [...] [...] Quicktime on Microsoft WIndows Vista and XP only. See the full announcement on the GNUCitizen site here. Current Workarounds include….Not opening up attachments from unknown sources. Sphere: [...]

]]> By: works on mac? http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120400 works on mac? Wed, 30 Apr 2008 15:59:47 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120400 so you are doing some HREF track ninja? http://www.apple.com/quicktime/tutorials/hreftracks.html You test this stuff on a mac PDP? so you are doing some HREF track ninja?

http://www.apple.com/quicktime.....racks.html

You test this stuff on a mac PDP?

]]> By: Hardware e Software » Blog Archive » QuickTime, individuata falla pericolosa http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120324 Hardware e Software » Blog Archive » QuickTime, individuata falla pericolosa Tue, 29 Apr 2008 21:21:19 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120324 [...] chi volesse approfondire l’argomento vi consiglio il seguente link contenente il messaggio ufficiale rilasciato dal Petkov ed un video che mostra la vulnerabilità in [...] [...] chi volesse approfondire l’argomento vi consiglio il seguente link contenente il messaggio ufficiale rilasciato dal Petkov ed un video che mostra la vulnerabilità in [...]

]]> By: hilikus http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120305 hilikus Tue, 29 Apr 2008 17:44:38 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120305 Very good findings and research pdp, keep up the good work, and props for the responsible disclosure. Don't let any of these trolls take away from your execlent findings. And good luck working with Apple, I just keep thinking about the wireless dirver vulnerability and how they treated HDMoore :\ @alino: I doubt he is going to say, read the other comments and his responses. Very good findings and research pdp, keep up the good work, and props for the responsible disclosure. Don’t let any of these trolls take away from your execlent findings. And good luck working with Apple, I just keep thinking about the wireless dirver vulnerability and how they treated HDMoore :\

@alino: I doubt he is going to say, read the other comments and his responses.

]]> By: Windows Ãœzerinde Yeni Bir QuickTime Açığı | MacOSXPC.Com http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120300 Windows Ãœzerinde Yeni Bir QuickTime Açığı | MacOSXPC.Com Tue, 29 Apr 2008 17:20:05 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120300 [...] olan ve bilgisayar korsanları arasında “pdp” olarak bilinen Petko D. Petkov’un açıklamasına göre Apple‘ın medya oynatıcı yazılımı olan QuickTime, Microsoft‘un Windows [...] [...] olan ve bilgisayar korsanları arasında “pdp” olarak bilinen Petko D. Petkov’un açıklamasına göre Apple‘ın medya oynatıcı yazılımı olan QuickTime, Microsoft‘un Windows [...]

]]> By: Pesquisador encontra nova falha no QuickTime p/ Windows http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120282 Pesquisador encontra nova falha no QuickTime p/ Windows Tue, 29 Apr 2008 14:43:35 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120282 [...] acordo com os detalhes publicados no blog GNUCitizen, o exploit envolve um arquivo malicioso especialmente criado. Quando o usuário abre este arquivo, [...] [...] acordo com os detalhes publicados no blog GNUCitizen, o exploit envolve um arquivo malicioso especialmente criado. Quando o usuário abre este arquivo, [...]

]]> By: alino http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120269 alino Tue, 29 Apr 2008 12:09:05 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120269 @PDP: Which Class of Vulnerability ( stack/heap based buffer overflow or other.. ) was used for this vulnerability? btw: good work pdp :) @PDP: Which Class of Vulnerability ( stack/heap based buffer overflow or other.. ) was used for this vulnerability? btw: good work pdp :)

]]> By: David Kierznowski http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120260 David Kierznowski Tue, 29 Apr 2008 09:57:06 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120260 <blockquote> Regarding hype: </blockquote> I think we sometimes forget our roots as security researchers. The only reason we have an industry today was because of full-disclosure and hype. If you can't create a noise to motivate change, then you don't affect the commercial market, which in turn means we are all out of jobs ;)

Regarding hype:

I think we sometimes forget our roots as security researchers. The only reason we have an industry today was because of full-disclosure and hype. If you can’t create a noise to motivate change, then you don’t affect the commercial market, which in turn means we are all out of jobs ;)

]]> By: cryoohki http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120259 cryoohki Tue, 29 Apr 2008 09:50:12 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120259 @jim: rtfa next time. Or at least the comments on /. For the "imaginary vulnerabilities" Apple's policy stinks, that's all I can say... @jim: rtfa next time. Or at least the comments on /.

For the “imaginary vulnerabilities” Apple’s policy stinks, that’s all I can say…

]]> By: Agujero de seguridad en Quicktime compromete a usuarios de Vista y XP | Win-Vista.es http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120209 Agujero de seguridad en Quicktime compromete a usuarios de Vista y XP | Win-Vista.es Mon, 28 Apr 2008 22:29:00 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120209 [...] Vía | GNUCitizen [...] [...] Vía | GNUCitizen [...]

]]> By: Security News - Tools - Tutorials and more … » Blog Archive » Department of Homeland Security website hacked! http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120198 Security News - Tools - Tutorials and more … » Blog Archive » Department of Homeland Security website hacked! Mon, 28 Apr 2008 19:36:24 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120198 [...] the demand. But should the attackers get their hands on a newer exploit - say, one targeting a zero-day vulnerability in QuickTime - it would be relatively easy for them to swap out the [...] [...] the demand. But should the attackers get their hands on a newer exploit - say, one targeting a zero-day vulnerability in QuickTime - it would be relatively easy for them to swap out the [...]

]]> By: Fallo de Seguridad de QuickTime en Windows XP y Vista | Incubaweb http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120194 Fallo de Seguridad de QuickTime en Windows XP y Vista | Incubaweb Mon, 28 Apr 2008 18:24:01 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120194 [...] detalles sobre el exploit están disponibles en el blog GNUCitizen, donde se describe el problema pero  no con el suficiente detalle para evitar que usuarios [...] [...] detalles sobre el exploit están disponibles en el blog GNUCitizen, donde se describe el problema pero  no con el suficiente detalle para evitar que usuarios [...]

]]> By: Neue Zero-Day-Lücke in Apples Quicktime entdeckt - News | ZDNet.de Security - Sicherheit http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120188 Neue Zero-Day-Lücke in Apples Quicktime entdeckt - News | ZDNet.de Security - Sicherheit Mon, 28 Apr 2008 16:01:53 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120188 [...] Sicherheitsforscher Petko D. Petkov hat auf Gnucitizen Informationen zu einer neuen Zero-Day-Lücke in Apples Quicktime veröffentlicht. In einem [...] [...] Sicherheitsforscher Petko D. Petkov hat auf Gnucitizen Informationen zu einer neuen Zero-Day-Lücke in Apples Quicktime veröffentlicht. In einem [...]

]]> By: Pesquisador encontra nova falha no QuickTime rodando no XP e Vista | Manoel Franklin http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120183 Pesquisador encontra nova falha no QuickTime rodando no XP e Vista | Manoel Franklin Mon, 28 Apr 2008 14:59:57 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120183 [...] as poucas informações publicadas no blog GNUCitizen, o código envolve um arquivo de mídia manipulado maliciosamente. Quando o usuário abre o [...] [...] as poucas informações publicadas no blog GNUCitizen, o código envolve um arquivo de mídia manipulado maliciosamente. Quando o usuário abre o [...]

]]>