Apple Quicktime Multiple Vulnerabilities

[TCH-Thomas]

From: Secunia

secunia.com/advisories/28092/

 

Rating: Highly critical

 

Description:

Some vulnerabilities have been reported in Apple QuickTime, which can be exploited by malicious people to compromise a user's system.

 

1) A boundary error in the handling of QTL files can be exploited to cause a heap-based buffer overflow when a user views a specially crafted QTL file.

 

Successful exploitation may allow execution of arbitrary code.

 

2) Various unspecified errors exist in QuickTime's Flash media handler, which can be exploited to execute arbitrary code.

 

The vulnerabilities are reported in Apple QuickTime prior to version 7.3.1.

 

Solution:

Update to Apple QuickTime version 7.3.1.

 

QuickTime 7.3.1 for Panther:

apple.com/support/downloads/quicktime731forpanther.html

 

QuickTime 7.3.1 for Tiger:

apple.com/support/downloads/quicktime731fortiger.html

 

QuickTime 7.3.1 for Leopard:

apple.com/support/downloads/quicktime731forleopard.html

 

QuickTime 7.3.1 for Windows:

apple.com/support/downloads/quicktime731forwindows.html

[TCH-Bruce]

Thanks Thomas