Quicktime patch closes security holes

ELEVEN HIGH RISK security vulnerabilities will be addressed by the next update to Apple's flagship media player, Quicktime, according to Eweek.

Both OSX and Windows versions will be patched to prevent malicious exploits, with the Windows version featuring address space layout randomisation (ASLR), a technology which randomly rejigs the position of key code areas to prevent attackers from predicting target addresses.

ASLR has also been used by Apple extensively in the latest iteration of OSX, Leopard.

The OSX version of Quicktime gets stack buffer safety checking and function call hardening, whatever that is. µ

L'Inq
Eweek