Apple QuickTime Vulnerabilities
Original release date: September 13, 2006
Last revised: --
Source: US-CERT
Systems Affected
Apple QuickTime for
- Apple Mac OS X
- Microsoft Windows
Overview
Apple has released Apple QuickTime 7.1.3 to correct several vulnerabilities. These vulnerabilities could allow an attacker to gain access to your computer.
Solution
Install an Update
OS X users should use the Mac OS X Software Update feature to download and install Apple QuickTime 7.1.3. Consider scheduling Software Update to check for updates automatically (this option is enabled by default).
Microsoft Windows users should upgrade to Apple QuickTime 7.1.3.
Description
QuickTime prior to version 7.1.3 has multiple image and media file handling vulnerabilities that could allow an attacker to run malicious programs on your computer. This could happen by visiting a malicious web site. Upgrading to Apple QuickTime version 7.1.3 will correct these vulnerabilities.
Note that QuickTime ships with Apple iTunes.
For more technical information, see US-CERT Technical Alert TA06-256A and the Apple QuickTime Security Update.
References
Feedback can be directed to US-CERT.
