iTunes 12.2 and QuickTime 7.7.7 for Windows: still outdated and VULNERABLE 3rd party libraries, still UNQUOTED and VULNERABLE pathnames C:Program Files…

Posted by Stefan Kanthak on Jul 02

Hi @ll,

the just released QuickTime 7.7.7 and iTunes 12.2 for Windows still
have quite some of the BLOODY beginners errors I already documented
in the past.

QuickTime 7.7.7, QuickTime.msi

unquoted pathname of executables in command line

[HKEY_LOCAL_MACHINESOFTWAREClientsMediaQuickTimeshellopencommand]
@=”C:\Program Files\QuickTime\QuickTimePlayer.exe”

iTunes 12.2, AppleMobileDeviceSupport.msi

outdated 3rd party…

007 Software