A bird-of-a-feather emailed me about a couple of additional public
stories about the exploit:

Mac version of QuickTime buggy too
In Windows, IE and Safari offer some protection; Firefox, none
http://www.computerworld.com/action/article.do?command=viewArticleBasic&

articleId=9048982&intsrc=news_ts_head

Proof-of-concept exploit targets Apple QuickTime
http://www.scmagazineus.com/Proof-of-concept-exploit-targets-Apple-Quick

Time/article/99221/

###

Security Response Researcher
Focus-Apple Moderator

Todd D. Woodward
Technical Support Engineer
NetBackup Support
Symantec Corporation
www.symantec.com
Springfield, Oregon

Office: 541-335-7441

[ reply ]