QuickTime Backdoor Allows Takeover Of Windows 7 Machines

[Alboguy]

A decade-old backdoor in Apple's QuickTime media player allows someone to completely take over or run malicious code on a Windows 7 machine, according to The Register. The weird backdoor is an unused parameter called " _Marshaled_pUnk," which has been around since 2001, and was originally used to draw contents in the current QuickTime window without opening a new one. The function is gone now, but that line of code was never deleted.

Full Article: HERE

[leofelix]

A decade-old backdoor .. OMG
I think Quicktime alternative is affected too as a consequence.

[Alboguy]

I don't know anybody that would use QuickTime under Windows though...

[leofelix]

perhaps some iTunes user?:-)

(never liked iTune I have to say)

[Ande]

Haven't use Quicktime or alternative for over a year.
Now I have a good reason to remove it from my computer.
Thanks!

[safeguy]

QuickTime?

It's time for you to quickly dump it

[Boyfriend]

@safeguy: Nice I just followed your advice.

I use QT Lite (4.0.0). I have dumped it quickly considering it is right time to do this.

[Neo]

It's time for you to quickly dump it

i follow that

i dont ever need to use this

[Ceyfer √]

OT/

Time to QuickRun! then if QuickInfected, just use QuickHeal.

Just my QuickThought! duh! forgot QuickTune...damn missing QuickSense!

[leofelix]

http://secunia.com/advisories/41213

Release Date 2010-08-31
Criticality level Highly critical
Impact System access
Where From remote
Solution Status Unpatched

The above Secunia advisory is the latest one