
Apple has released a QuickTime update to fix a security flaw to close a hole found by the winner of a recent hack-the-Mac contest.
Apple posted the fix for QuickTime for Macs here and a Windows-based system patch can be found here. In both cases the patch requires reinstalling the entire QuickTime application.
The QuickTime vulnerability first surfaced last month in a Mac hack challenge and is considered "very serious," according to an Apple security bulletin. According to earlier reports it can be exploited through any Java-enabled browser, including Internet Explorer 7 running on both Windows XP and Vista.
The security hole comes weeks after the CanSecWest conference in Vancouver, British Columbia where a $10,000 prize was offered by 3Com's TippingPoint division to anyone who could demonstrate how a Mac could be breached via a browser. Because QuickTime runs on both Macs and Windows-based computers, PC users are also vulnerable.
Security experts at Gartner condemned the hack-a-Mac challenge calling it "a risky endeavor."
This is NOT a patch but a time consuming download of the entire Quick Time Program for those with windows versions.