Security Experts: Uninstall Apple Quicktime From Windows PCs Immediately
Urgent call for Windows users to uninstall Quicktime after Apple halts security updates and retires PC version
Security experts and a US government agency are advising Microsoft Windows users to immediately uninstall Apple’s media player Quicktime from their PCs.
Apple is no longer be providing security updates for QuickTime for Windows, leaving the PC version vulnerable to exploitation.
Uninstall Warning
Security firm Trend Micro has discovered two new bugs in the software that could be used to launch attacks on PCs if users visit a malicious web page or open a malicious file. And because Apple has decided to not patch the Windows version, the only sensible advice was to uninstall the software.
“We’re putting the word out that everyone should follow Apple’s guidance and uninstall QuickTime for Windows as soon as possible,” blogged Trend Micro. “This is for two reasons. First, Apple is deprecating QuickTime for Microsoft Windows. They will no longer be issuing security updates for the product on the Windows Platform and recommend users uninstall it.”
It should be noted that Apple is still maintaining Quicktime on Mac OS machines.
“Second, our Zero Day Initiative has just released two advisories ZDI-16-241 and ZDI-16-242 detailing two new, critical vulnerabilities affecting QuickTime for Windows,” wrote Trend. “These advisories are being released in accordance with the Zero Day Initiative’s Disclosure Policy for when a vendor does not issue a security patch for a disclosed vulnerability. And because Apple is no longer providing security updates for QuickTime on Windows, these vulnerabilities are never going to be patched.”
The security vendor said it was not aware yet of any active attacks using these flaws.
The advice to unistall Quicktime from Windows PC was quickly echoed by the US government agency, namely the Department of Homeland Security’s United States Computer Emergency Readiness Team, or US-CERT.
“Exploitation of QuickTime for Windows vulnerabilities could allow remote attackers to take control of affected systems,” it warned. “The only mitigation available is to uninstall QuickTime for Windows.”
Irresponsible Move?
The decision by Apple not to provide any more security updates for Quicktime is puzzling.
The iPad maker has made no official announcement that it is retiring the PC version, which has been in existence for approximately 20 years, which means there should be a sizeable number of PC users affected by this decision.
Indeed, the only announcement of a decision to kill off the product came when Trend notified Apple that it had discovered the two flaws, and Apple told it was “deprecating QuickTime for Microsoft Windows.”
Are you a security expert? Try our quiz!
