If you have QuickTime installed on your system, be sure to update it to the latest version using Apple's Software Update utility or by downloading the latest QuickTime installer from Apple's QuickTime Web site. Apple has outlined the details of the issues in a recent knowledge-base article. The malicious file would cause a buffer overflow or other memory corruption that would return a corrupted memory pointer, which could then execute code stored at that memory address. The vulnerabilities in the QuickTime software that called for this update were ones in which a maliciously crafted QuickTime file could take control of a machine, in ways similar to exploits for other software packages like Java, Flash, Word, and Adobe Reader. Because of its popularity, attackers may use vulnerabilities in it as a vector for compromising the system on which it is installed. This update is only for Windows-based machines that have QuickTime installed, since Mac systems have had this update applied in recent security updates for OS X.Īpple's QuickTime media player and plug-in are used by about half of all Windows PCs and all of Apple's systems since OS X includes QuickTime as a core component of the OS.
Apple issued a QuickTime update today that addresses a number of security vulnerabilities in the media player and its Web plug-in.
