Apple patches critical security flaw in QuickTime
Apple has released a new security patch for QuickTime, its eighth update this year for the media player software.
The update addresses three critical security holes in QuickTime, including a vulnerability that has been used in attacks by online criminals.
The most critical of the flaws lies in QuickTime's implementation of the Real Time Streaming Protocol (RTSP), used to play audio and video over the Internet. The flaw was made public Nov. 23, and in early December attackers began exploiting the flaw in online attacks. By tricking victims into visiting a malicious Web site that exploited the flaw, hackers were able to install malicious software on the victims' PCs.
