U.S. Department of Homeland Security: Uninstall Apple’s QuickTime for Windows

The U.S. Computer Emergency Readiness Team (US-CERT), part of the Department of Homeland Security (DHS), has issued the following alert:

Alert (TA16-105A)

Apple Ends Support for QuickTime for Windows; New Vulnerabilities Announced

Systems Affected
Microsoft Windows with Apple QuickTime installed

Overview
According to Trend Micro, Apple will no longer be providing security updates for QuickTime for Windows, leaving this software vulnerable to exploitation.

Description
All software products have a lifecycle. Apple will no longer be providing security updates for QuickTime for Windows.

The Zero Day Initiative has issued advisories for two vulnerabilities found in QuickTime for Windows.

Impact
Computer systems running unsupported software are exposed to elevated cybersecurity dangers, such as increased risks of malicious attacks or electronic data loss. Exploitation of QuickTime for Windows vulnerabilities could allow remote attackers to take control of affected systems.

Solution
Computers running QuickTime for Windows will continue to work after support ends. However, using unsupported software may increase the risks from viruses and other security threats. Potential negative consequences include loss of confidentiality, integrity, or availability of data, as well as damage to system resources or business assets. The only mitigation available is to uninstall QuickTime for Windows. Users can find instructions for uninstalling QuickTime for Windows on the Apple Uninstall QuickTime page.

Source: Department of Homeland Security

24 Comments

  1. I would think windows 10 and all its dlls and registry entries has a few more than 2 zero day vulnerabilities. More to the point, How can I watch the Force Awakens that I purchased from the iTunes video store on my win 10 laptop without QuickTime?

    1. It’s only referring to the old version (7.7.78). iTunes includes the video player inside of the app now so it’s not essential to install QuickTime. Version 7.7.9 is not vulnerable to the issues cited.

      1. I’m sorry, but I don’t know what you’re talking about: The advice from ALL concerned is to uninstall ALL instances of Apple QuickTime for Windows. ALL. As in ALL.

        There is no safe version of QuickTime for Windows. Apple has discontinued QuickTime for Windows.

        IOW: Uninstall ALL versions of QuickTime for Windows.

        Meanwhile, you are correct about iTunes.

        1. I think what Voice is saying is that the new stand-alone iTunes includes the services that were formerly handled by the separately installed QuickTime For Windows.

          So you can uninstall the separate QT4W which is no longer being supported. It won’t be needed any longer because iTunes has it built-in now.

  2. I still use QT on W10, and it still works better than Windoze Media Player. I won’t be uninstalling it anytime soon. I’m sure it is still more secure, too.

    BTW, I *hate* Windoze 10. Total pile of crap. (I’m a Mac fan through and through, but when I have to use Windoze, W7 doesn’t totally suck like every other version has since XP.)

    1. I finally broke down and built a new high end gaming rig 2weeks ago. I had a win7 copy ready cause no way I Hell I’d install win8….
      I ended up doing the free “upgrade” to win10 (clean install)
      After a few annoying things I had to turn off/remove its not that bad.. Honestly a lot like win7.

      The only reason I decided to do win10 was this machine has NO use outside legit games. Steam, stand alone game installs, and mumble. There is nothing else installed (never will) cause I do everything else on my macs.

      Is win10 great? Hardly, but it’s usable.
      And it’s not the clusterF**k win8 was..

      (I forget the game, but an upcoming title that is on my wish list will not be playable on win7.. A letdown and I saw this was just the first of will probably be the norm.. So I decided to try win10)

      1. Apple could have avoided the current not-so-positive QuickTime news by quietly removing QT during an iTunes update and replacing it with only then necessary built-in video playing software. After all, one Trojan horse (in the Windows environment) is enough. Leaving an optional QT installation up to the Windows user has always been confusing to begin with.

        1. Total agreement! Excellent point!

          Apparently, Apple was hoping their abandonment of QuickTime on Windows would be as quiet as their abandonment of Safari. Nope!

          Sad to say, Apple hasn’t been any too good at updating QuickTime on OS X. I’ve never been pleased with the disabled capabilities in QuickTime 10, the 64-bit version. Why the fsck do I have to keep QuickTime v7.6.6, the 32-bit version, around on my Macs for full functionality? It’s ridiculous. I’ve ranted at Apple about it many times.

    1. George is effectively correct. Apple has known about these two security holes since at least last November. Apple has decided to NOT patch them. Apple has instead decided to no longer support QuickTime for Windows. It is abandonware. It is now considered dangerous to use.

  3. When was the last time anyone heard of the Department of Homeland Security made such an announcement about ANY piece of software or a utility? Where was their announcement about that piece of crap utility Adobe Flash player???? Why is it so important to remove Apple’s QuickTime when there is no current vulnerability or exploit but just could possibly be one. . . someday in the future. Something smells of payback here for Apple not bending over and taking it on the iPhone issue.

    1. There are TWO well documented zero-day exploits of Apple QuickTime for Windows. The original report of the problems is from TrendMicro. Their article provides links to descriptions of the two security holes:

      http://blog.trendmicro.com/urgent-call-action-uninstall-quicktime-windows-today/

      Our Zero Day Initiative has just released two advisories ZDI-16-241 and ZDI-16-242 detailing two new, critical vulnerabilities affecting QuickTime for Windows. These advisories are being released in accordance with the Zero Day Initiative’s Disclosure Policy for when a vendor does not issue a security patch for a disclosed vulnerability. And because Apple is no longer providing security updates for QuickTime on Windows, these vulnerabilities are never going to be patched.

      Result: Uninstall QuickTime for Windows. It will never be safe to use again.

      1. Correction: I meant to remove the phrase ‘zero-day exploits’. That is WRONG. At this time they are simply reported security holes in QuickTime. They were reported as part of TrendMicro’s Zero Day Initiative, meaning that they’re expected to be exploited.

    1. Feather, I use quicktime …. all the time. I have VLC which does more formats than Quicktime, but really sucks vs frame by frame advance and rewind, There, Quicktime totally leads.

      It would be nice if Quicktime worked with as many formats as VLC, but having both is not that bad.

Reader Feedback

This site uses Akismet to reduce spam. Learn how your comment data is processed.