Printer Friendly
The Free Library
19,607,059 articles and books
Member login
User name  
Password 
 
Join us Forgot password?

Blue Coat Appliances Protect Against Critical QuickTime Vulnerability That Gives Hackers Control of Computers.


ProxySG Appliances Prevent Exploit Affecting iTunes and Other Applications Using QuickTime From Turning Computers Into Bots or Hosts for Spyware

SUNNYVALE, Calif. -- Blue Coat Systems, Inc. (Nasdaq:BCSI BCSI Building Scalable Cisco Internetworks ), a leader in WAN Application Delivery and Secure Web Gateway, today announced that its Blue Coat[R] ProxySG[R] appliances protect against the recently discovered security vulnerability in QuickTime software, a technology used with iTunes and other PC and Mac media applications. Malicious content disguised as or integrated with music or video that is accessed through QuickTime is automatically detected by ProxySG appliances deployed at a company or organization's Internet gateway and is prevented from gaining control of individual computers. To date, there is no patch or fix for this QuickTime software vulnerability, and Blue Coat ProxySG appliances currently may be the only available solution to provide protection from this vulnerability.

The QuickTime vulnerability potentially enables a criminal or hacker to take "root control" of an individual computer and to convert it into a so-called "zombie A computer that has been covertly taken over in order to perform some nefarious task. It is estimated that millions of PCs around the world have been compromised and, under the control of a third party, routinely transmit messages unbeknownst to the user. " used for malicious purposes as a part of a botnet or to plant spyware, such as framegrabbers or keyloggers, which can monitor and steal personal information. The vulnerability affects version 7.x of QuickTime software and results from a data boundary buffer overflow error when the QuickTime software processes Real Time Streaming Protocol (multimedia, networking, protocol) Real Time Streaming Protocol - (RTSP) An application layer protocol for controlling delivery of a stream of real-time multimedia content. RTSP allows users to start playing from a certain position.  (RTSP (RealTime Streaming Protocol) An application layer protocol used to transmit streaming audio, video and 3D animation over the Internet. It enables the user's client software to provide remote control of the server with functions such as pause, rewind and fast ) replies.

"ProxySG appliances are a powerful solution for protecting against Web threats, including spyware, viruses and malicious code," said Mikko Valimaki, chief scientist, Blue Coat Systems, Inc. "Our appliances have visibility and understanding of users, content and applications and can use this information to apply appropriate controls. They can accelerate legitimate business-critical applications, manage or mitigate the effect of non-business applications and stop malicious traffic dead in its tracks."

ProxySG Appliances - Combining Security, Control and Acceleration

ProxySG appliances protect enterprises or organizations against malware, including viruses and spyware, provide URL URL
 in full Uniform Resource Locator

Address of a resource on the Internet. The resource can be any type of file stored on a server, such as a Web page, a text file, a graphics file, or an application program.
 filtering, anti-phishing capability, and manage the use of Internet applications for compliance with policy or for bandwidth consumption, including instant messaging, streaming media and peer-to-peer file sharing. ProxySG appliances also accelerate business-critical applications or content at the Internet gateway or across an organization's Wide Area Network (WAN). ProxySG appliances provide broad coverage for popular web protocols, including HTTP HTTP
 in full HyperText Transfer Protocol

Standard application-level protocol used for exchanging files on the World Wide Web. HTTP runs on top of the TCP/IP protocol.
, SSL (Secure Sockets Layer) The leading security protocol on the Internet. Developed by Netscape, SSL is widely used to do two things: to validate the identity of a Web site and to create an encrypted connection for sending credit card and other personal data. , FTP FTP
 in full file transfer protocol

Internet protocol that allows a computer to send files to or receive files from another computer. Like many Internet resources, FTP works by means of a client-server architecture; the user runs client software to connect to
, SOCKS, IM, P2P See peer-to-peer and point-to-point.  and Streaming Content (RTSP, MMS (Multimedia Messaging Service) An enhanced transmission service that enables graphics, video clips and sound files to be transmitted via cellphones. Developed as part of the 3GPP project, MMS phones are generally backward compatible with SMS and EMS. ) for an integrated secured web gateway solution.

About Blue Coat Systems

Blue Coat secures Web communications and accelerates business applications across the distributed enterprise. Blue Coat's family of appliances and client-based solutions - deployed in branch offices, Internet gateways, end points, and data centers - provide intelligent points of policy-based control enabling IT organizations to optimize security and accelerate performance between users and applications. Blue Coat has installed more than 30,000 appliances worldwide and is ranked #1 by IDC in the Secure Content and Application Delivery market. Blue Coat is headquartered in Sunnyvale, California, and can be reached at (408) 220-2200 or www.bluecoat blue·coat  
n.
A person who wears a blue uniform, especially a police officer.



bluecoat
.com.

About the QuickTime Vulnerability

For more information about the QuickTime vulnerability, please refer to US-Cert VU#659761 and http://www.kb.cert.org/vuls/id/659761.

FORWARD LOOKING STATEMENTS: The statements contained in this press release that are not purely historical are forward-looking statements, including statements regarding Blue Coat Systems' expectations, beliefs, intentions or strategies regarding the future, and including statements regarding the capabilities and expected performance of Blue Coat Systems' products. All forward-looking statements included in this press release are based upon information available to Blue Coat Systems as of the date hereof, and Blue Coat Systems assumes no obligation to update any such forward-looking statements. Forward-looking statements involve risks and uncertainties, which could cause actual results to differ materially from those projected. These and other risks relating to Blue Coat Systems' business are set forth in Blue Coat Systems' Form 10-K Form 10-K

A report required by the SEC from exchange-listed companies that provides for annual disclosure of certain financial information.


Form 10-K

See 10-K.
 for the year ended April 30, 2007, and Form 10-Q Form 10-Q

See 10-Q.
 for the quarter ended October 31, 2007, filed with the Securities and Exchange Commission.

Blue Coat and other applicable product names are trademarks or registered trademarks of Blue Coat Systems, Inc. in the United States and other countries. All other trademarks, trade names or service marks used or mentioned herein belong to their respective owners.
COPYRIGHT 2007 Business Wire
No portion of this article can be reproduced without the express written permission from the copyright holder.
Copyright 2007, Gale Group. All rights reserved.

 Reader Opinion

Title:

Comment:



 

Article Details
Printer friendly Cite/link Email Feedback
Publication:Business Wire
Date:Dec 10, 2007
Words:688
Previous Article:Flurry and simyo to Provide Free Mobile Email in Germany.
Next Article:GraphOn Enters into OEM Partnership with Datasul.
Topics:



Related Articles
TIGHTENING YOUR INFORMATION SYSTEMS SECURITY.
The war on terrorism: cyberterrorists beware. (Up front: news, trends & analysis).
TWO-THIRDS OF ENTERPISES VULNERABLE TO WEB-BASED THREATS.
MUSTANG ENGINEERING FENDS OFF SPYWARE WITH BLUE COAT PROXYSG.
Firms wait for Microsoft fix for day zero PowerPoint flaw.
BLUE COAT UNVEILS UPGRADE TO K9 WEB PROTECTION SOFTWARE.
What e-mail hackers know that you don't.
BLUE COAT UNVEILS ENTENDED USER AUTHENTICATION FOR WAN.
BLUE COAT UNVEILS NEW AUTHENTICATION PROCESS FOR WAN.
Austal Selects Blue Coat Appliances for WAN Optimization across Town and Across the World.

Terms of use | Copyright © 2012 Farlex, Inc. | Feedback | For webmasters | Submit articles