Technology news and Jobs 
Information Technology News Symantec: Second PoC for QuickTime vulnerability
Information Technology News Symantec: Second PoC for QuickTime vulnerability | Symantec: Second PoC for QuickTime vulnerability |
|
| by Stephen Withers | |
| Thursday, 29 November 2007 | |
  
Featured Whitepaper
5 Best Practices for Smartphone Support
Since the attack relies on Internet Explorer, it is specific to Windows XP and Vista. This approach makes it easier to deliver whatever shell code the attacker chooses, but it will not work on an unmodified RTSP server. Symantec has assigned Quimkids its lowest risk level as it has been found on a very small number of sites and is easily contained and removed. Symantec currently recommends sites block RTSP completely unless is it specifically required, disable the QuickTime ActiveX controls in Internet Explorer and the plug-in for Firefox, disable JavaScript (this is a tall order given that even Symantec's web site uses JavaScript), and (as always) users should avoid untrusted QuickTime files. |
Tags
| < Next story in category | Previous story in the category > |
|---|
