Uninstall QuickTime For Windows: Apple Will Not Patch Its Security Bugs: The Register

[6Foot2]

Link: Uninstall QuickTime for Windows: Apple will not patch its security bugs: The Register

 

RIP QuickTime for Windows. Apple is "deprecating support" for the application, and will no longer patch security flaws in the software.

 

The iGiant is also quietly advising users to uninstall the media player from their Windows machines to avoid being hacked.

 

Word of the end of support comes from infosec biz Trend Micro. It discovered two critical flaws in the Windows build of QuickTime and reported them to Apple. In response, Trend told The Register, the iPhone maker said it won't fix the bugs, and is cutting the application loose.

 

Both of the vulnerabilities – ZDI-16-241 and ZDI-16-242 – are heap-corruption-based remote code execution vulnerabilities.

 

An attacker can exploit these flaws to hijack a victim's PC and infect it with malware, simply by tricking them into opening a malicious file or web download. Apple's response: uninstall QuickTime for Windows...

[free780]

Good riddens. I think it's not licensed for organisations. Use vlc player instead.

[DJ-1701]

Wow, an end of an era. Long live VLC.