Comments on: QuickTime 0day for Vista and XP http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/ Information Security Think Tank Sat, 02 Feb 2013 17:50:40 +0000 hourly 1 http://wordpress.org/?v=3.4.1 By: Details of the QuickTime Vulnerability | GNUCITIZEN http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-123630 Details of the QuickTime Vulnerability | GNUCITIZEN Tue, 09 Sep 2008 14:24:47 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-123630 [...] I intend to give a brief overview of the QuickTime vulnerability which I partially-disclosed over here. I should have made these details public long time ago but better late then never. The [...] [...] I intend to give a brief overview of the QuickTime vulnerability which I partially-disclosed over here. I should have made these details public long time ago but better late then never. The [...]

]]> By: My BH Las Vegas Slides | GNUCITIZEN http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-123626 My BH Las Vegas Slides | GNUCITIZEN Tue, 09 Sep 2008 10:30:14 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-123626 [...] Yes, it is time for a coffee. Unfortunately, it does not look as good as the one from the picture above. The slides can be found here. The next post is all about the QuickTime vulnerability which I partially-disclosed over here. [...] [...] Yes, it is time for a coffee. Unfortunately, it does not look as good as the one from the picture above. The slides can be found here. The next post is all about the QuickTime vulnerability which I partially-disclosed over here. [...]

]]> By: Zero-Day Vulnerability Reported in Apple’s QuickTime for Windows XP and Vista http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-123299 Zero-Day Vulnerability Reported in Apple’s QuickTime for Windows XP and Vista Sun, 24 Aug 2008 14:19:48 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-123299 [...] a computer security consultancy, on Friday warned of a zero-day vulnerability in Apple’s QuickTime media player for Windows XP and Windows Vista. “A remote [...] [...] a computer security consultancy, on Friday warned of a zero-day vulnerability in Apple’s QuickTime media player for Windows XP and Windows Vista. “A remote [...]

]]> By: Giuseppe Cascone » Blog Archive » QuickTime 0day for Vista and XP http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-122901 Giuseppe Cascone » Blog Archive » QuickTime 0day for Vista and XP Wed, 09 Jul 2008 12:37:35 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-122901 [...] see video click) Because we are an information security think tank and because we encounter some very interesting [...] [...] see video click) Because we are an information security think tank and because we encounter some very interesting [...]

]]> By: Antonio Trigiani iBlog - Informatica Virale » Blog Archive » Video: Vulnerabilità QuickTime 0day su Windows Vista e XP http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-121397 Antonio Trigiani iBlog - Informatica Virale » Blog Archive » Video: Vulnerabilità QuickTime 0day su Windows Vista e XP Sat, 10 May 2008 17:52:45 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-121397 [...] sicurezza, Video | Il team di Gnucitizen mostra in questo video come sfruttare la vulnerabilità 0day di QuickTime su Windows Vista e Windows [...] [...] sicurezza, Video | Il team di Gnucitizen mostra in questo video come sfruttare la vulnerabilità 0day di QuickTime su Windows Vista e Windows [...]

]]> By: Quicktime Flaw Makes Windows Vulnerable to Attack | Networking for Networkers http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-120835 Quicktime Flaw Makes Windows Vulnerable to Attack | Networking for Networkers Mon, 05 May 2008 16:58:44 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120835 [...] PCs running Windows Vista SP1 and XP SP2. Although details are a bit thin at the moment, the GNUCitizen blog has published a movie purporting to show the attack in [...] [...] PCs running Windows Vista SP1 and XP SP2. Although details are a bit thin at the moment, the GNUCitizen blog has published a movie purporting to show the attack in [...]

]]> By: Ix http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-120563 Ix Fri, 02 May 2008 13:38:13 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120563 Seconding Jim's question. Knowing it exists is important, knowing what's being done about it is even more important. Seconding Jim’s question. Knowing it exists is important, knowing what’s being done about it is even more important.

]]> By: Jim Manico http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-120414 Jim Manico Thu, 01 May 2008 04:13:13 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120414 Inquiring minds want to know. Can you at least let us know how Apple is reacting to this exploit? Inquiring minds want to know. Can you at least let us know how Apple is reacting to this exploit?

]]> By: flashdrive http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-120409 flashdrive Thu, 01 May 2008 00:03:47 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120409 when can we expect to see how this is done? when can we expect to see how this is done?

]]> By: GNUCitizen: QuickTime for Windows Vista and XP Leakage Leads to Inevitable Badness | Infosecurity.US http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-120408 GNUCitizen: QuickTime for Windows Vista and XP Leakage Leads to Inevitable Badness | Infosecurity.US Wed, 30 Apr 2008 23:57:22 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120408 [...] Quicktime on Microsoft WIndows Vista and XP only. See the full announcement on the GNUCitizen site here. Current Workarounds include….Not opening up attachments from unknown sources. Sphere: [...] [...] Quicktime on Microsoft WIndows Vista and XP only. See the full announcement on the GNUCitizen site here. Current Workarounds include….Not opening up attachments from unknown sources. Sphere: [...]

]]> By: works on mac? http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-120400 works on mac? Wed, 30 Apr 2008 15:59:47 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120400 so you are doing some HREF track ninja? http://www.apple.com/quicktime/tutorials/hreftracks.html You test this stuff on a mac PDP? so you are doing some HREF track ninja? http://www.apple.com/quicktime.....racks.html You test this stuff on a mac PDP?

]]> By: Hardware e Software » Blog Archive » QuickTime, individuata falla pericolosa http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-120324 Hardware e Software » Blog Archive » QuickTime, individuata falla pericolosa Tue, 29 Apr 2008 21:21:19 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120324 [...] chi volesse approfondire l’argomento vi consiglio il seguente link contenente il messaggio ufficiale rilasciato dal Petkov ed un video che mostra la vulnerabilità in [...] [...] chi volesse approfondire l’argomento vi consiglio il seguente link contenente il messaggio ufficiale rilasciato dal Petkov ed un video che mostra la vulnerabilità in [...]

]]> By: hilikus http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-120305 hilikus Tue, 29 Apr 2008 17:44:38 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120305 Very good findings and research pdp, keep up the good work, and props for the responsible disclosure. Don't let any of these trolls take away from your execlent findings. And good luck working with Apple, I just keep thinking about the wireless dirver vulnerability and how they treated HDMoore :\ @alino: I doubt he is going to say, read the other comments and his responses. Very good findings and research pdp, keep up the good work, and props for the responsible disclosure. Don’t let any of these trolls take away from your execlent findings. And good luck working with Apple, I just keep thinking about the wireless dirver vulnerability and how they treated HDMoore :\

@alino: I doubt he is going to say, read the other comments and his responses.

]]> By: Windows Ãœzerinde Yeni Bir QuickTime Açığı | MacOSXPC.Com http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-120300 Windows Ãœzerinde Yeni Bir QuickTime Açığı | MacOSXPC.Com Tue, 29 Apr 2008 17:20:05 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120300 [...] olan ve bilgisayar korsanları arasında “pdp” olarak bilinen Petko D. Petkov’un açıklamasına göre Apple‘ın medya oynatıcı yazılımı olan QuickTime, Microsoft‘un Windows [...] [...] olan ve bilgisayar korsanları arasında “pdp” olarak bilinen Petko D. Petkov’un açıklamasına göre Apple‘ın medya oynatıcı yazılımı olan QuickTime, Microsoft‘un Windows [...]

]]> By: Pesquisador encontra nova falha no QuickTime p/ Windows http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-120282 Pesquisador encontra nova falha no QuickTime p/ Windows Tue, 29 Apr 2008 14:43:35 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120282 [...] acordo com os detalhes publicados no blog GNUCitizen, o exploit envolve um arquivo malicioso especialmente criado. Quando o usuário abre este arquivo, [...] [...] acordo com os detalhes publicados no blog GNUCitizen, o exploit envolve um arquivo malicioso especialmente criado. Quando o usuário abre este arquivo, [...]

]]> By: alino http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-120269 alino Tue, 29 Apr 2008 12:09:05 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120269 @PDP: Which Class of Vulnerability ( stack/heap based buffer overflow or other.. ) was used for this vulnerability? btw: good work pdp :) @PDP: Which Class of Vulnerability ( stack/heap based buffer overflow or other.. ) was used for this vulnerability? btw: good work pdp :)

]]> By: David Kierznowski http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-120260 David Kierznowski Tue, 29 Apr 2008 09:57:06 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120260 <blockquote> Regarding hype: </blockquote> I think we sometimes forget our roots as security researchers. The only reason we have an industry today was because of full-disclosure and hype. If you can't create a noise to motivate change, then you don't affect the commercial market, which in turn means we are all out of jobs ;)

Regarding hype:

I think we sometimes forget our roots as security researchers. The only reason we have an industry today was because of full-disclosure and hype. If you can’t create a noise to motivate change, then you don’t affect the commercial market, which in turn means we are all out of jobs ;)

]]> By: cryoohki http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-120259 cryoohki Tue, 29 Apr 2008 09:50:12 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120259 @jim: rtfa next time. Or at least the comments on /. For the "imaginary vulnerabilities" Apple's policy stinks, that's all I can say... @jim: rtfa next time. Or at least the comments on /.

For the “imaginary vulnerabilities” Apple’s policy stinks, that’s all I can say…

]]> By: Agujero de seguridad en Quicktime compromete a usuarios de Vista y XP | Win-Vista.es http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-120209 Agujero de seguridad en Quicktime compromete a usuarios de Vista y XP | Win-Vista.es Mon, 28 Apr 2008 22:29:00 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120209 [...] Vía | GNUCitizen [...] [...] Vía | GNUCitizen [...]

]]> By: Security News - Tools - Tutorials and more … » Blog Archive » Department of Homeland Security website hacked! http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/comment-page-1/#comment-120198 Security News - Tools - Tutorials and more … » Blog Archive » Department of Homeland Security website hacked! Mon, 28 Apr 2008 19:36:24 +0000 http://www.gnucitizen.org/blog/quicktime-0day-for-vista-and-xp/#comment-120198 [...] the demand. But should the attackers get their hands on a newer exploit - say, one targeting a zero-day vulnerability in QuickTime - it would be relatively easy for them to swap out the [...] [...] the demand. But should the attackers get their hands on a newer exploit – say, one targeting a zero-day vulnerability in QuickTime – it would be relatively easy for them to swap out the [...]

]]>