Researchers at Symantec’s Security reported that the company had seen an active exploit for the vulnerability in Apple’s QuickTime that could lead to users downloading Trojan software. Exploit code was found on a compromised porn site that redirects users to a site hosting malicious software called “Downloader.” Downloader is a Trojan that causes compromised machines to download other malicious software from the Internet. Symantec rated Downloader as very low risk. No patch is currently available for the vulnerability which affects version 7.x and it is advised to run Web browsers at the highest security settings possible, disable Apple QuickTime as a registered RTSP protocol handler, and filter outgoing activity over common RTSP ports, including TCP port 554 and UDP ports 6970-6999.
