Apple
The latest OS X flaw involved QuickTime for Java

Apple fixes QuickTime spyware flaw

JavaScript bug allowed for remote screenshots

Written by Shaun Nichols in California

The latest security patch for Mac OS X fixes a QuickTime vulnerability that could let attackers capture images from a user's screen and upload them to a remote site.

Apple said that the vulnerability does not affect Windows users or versions of Mac OS prior to 10.4. 

The vulnerability is not related to the QuickTime flaw that spread through social networking site MySpace last week. 

The new flaw involves QuickTime for Java, a component that lets Java applets display QuickTime movies, and Quartz Composer, a software tool used to render images in Mac OS.

According to Apple, an attacker could place JavaScript code on a website that would use the QuickTime for Java component to obtain screen images and send them to a remote location, possibly allowing the attacker to obtain sensitive information displayed on the screen.

The security fix closes the vulnerability by not allowing unsigned Java applets to access Quartz Composer.

The patch can be downloaded from Apple's website or through OS X Software Update.

Tags:

Further reading

Related articles

Apple patches two QuickTime holes

Java flaws affect Mac and Windows versions   More...

Apple patches QuickTime flaw

Windows vulnerability allowed scripted attacks   More...

Apple releases seven QuickTime fixes

Vulnerabilities affect OS X and Windows versions   More...

Apple fixes critical QuickTime flaws

XP, Vista and Mac OS X versions affected   More...

Do you agree?

Advertisement

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Advertisement

Watch

16 May 2008

2.97 MBXP on OLPC, broken dreams and Yahoo fights back More...

15 May 2008

3.28 MBDark fibre, mobile TV and solar power More...

14 May 2008

2.66 MBOnline inequality, mobile thumbprints and corporate raids More...

Poll

HOME WORKING

HOME WORKING

Do you let any or all of your employees work from home?

Previous poll results

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Spotlight

OLPC

OLPC to ship with Windows XP

Microsoft teams up with One Laptop per Child project   More...

The Sims

The Sims goes flat-pack with Ikea

Virtual world gets Swedish wood   More...

Advertisement

Microsoft-Yahoo

Yahoo board fights back at Icahn

Investor accused of 'significant misunderstanding' in Microsoft saga   More...

MySpace

Woman charged over MySpace suicide

Lori Drew indicted on federal charges   More...

Advertisement