After an 11-year run, QuickTime for Windows is no more. Apple has confirmed it will no longer issue updates or patch security holes for the PC version of its multimedia software, meaning those who continue to use the software do so at their own risk .
Last week software security outfit Trend Micro disclosed the discovery of two new flaws in QuickTime 7 for Windows, saying Apple was informed of the security threats in November. At the time, Apple said it had no plans to issue a patch, adding the software "would be deprecated on Windows and the vendor would publish removal instructions for users."
Apple has yet to post an official announcement regarding the apparent deprecation, but on Monday confirmed the development to The Wall Street Journal.
As for the vulnerabilities, Trend Micro was able to trigger heap overflows by directing QuickTime to a malicious website or playing back an infected file, thereby opening the door to remote code execution. A common attack vector, heap overflow bugs let nefarious users install data-harvesting malware onto a target computer.
While the security firm has not seen instances of the flaw being exploited in the wild, it said uninstalling QuickTime is the only sure method of protection. With QuickTime deprecated, and its last update now three months old, Windows users are urged to uninstall the software to avoid potential security breaches. Apple in March published a step-by-step uninstall guide on its Support Pages website.
23 Comments
So, uninstall QuickTime forever and use vlc instead for everything!
They still sell QT 7 Pro for Windows. QT 7 had a lot better features and better quality output than QT X in my opinion. I never used the Windows version but I liked the Mac version for quick format conversions. I have FCP X but mostly I use Premier and just re-render if I want to export a different format or size. Takes longer but it works.
I regret that move by Apple. I don't use Windows and I don't have a Windows machine but it still affects me. I have lots of friends who use Windows exclusively; I used to be able to send them video from my Mac without worrying: they would have or could get Quicktime. Now I have to worry about the video capabilities of Windows. Bah!
It looks like Apple removed the plugin aspects of QuickTime in the last update so it's not as easy to exploit the flaw. It requires downloading a file and having QuickTime open it as opposed to just visiting a web site.