Apple QuickTime Vulnerabilities

Apple QuickTime for

• Apple Mac OS X
• Microsoft Windows

Apple has released Apple QuickTime 7.1 to correct several
vulnerabilities. These vulnerabilities could allow an attacker to gain access to your computer.

Solution

Install an Update

OS X users should use the Mac OS X Software Update feature to download and install Apple QuickTime 7.1. Consider scheduling Software Update to check for updates automatically (this option is enabled by default).

Microsoft Windows users should upgrade to Apple QuickTime 7.1.

QuickTime prior to version 7.1 has multiple image and media file handling vulnerabilities that could allow an attacker to run malicious programs on your computer. This could happen by visiting a malicious web site. Upgrading to Apple QuickTime version 7.1 will correct these vulnerabilities.

For more technical information, see US-CERT Technical Alert TA06-132B and the Apple QuickTime Security Update.

References

• US-CERT Technical Alert TA06-132B - <http://www.us-cert.gov/cas/techalerts/TA06-132B.html>
• Securing Your Web Browser - <http://www.us-cert.gov/reading_room/securing_browser/>
• Vulnerability Notes for QuickTime 7.1 - <http://www.kb.cert.org/vuls/byid?searchview&query=QuickTime_7.1>
• About the security content of the QuickTime 7.1 Update - <http://docs.info.apple.com/article.html?artnum=303752>
• Apple QuickTime 7.1 - <http://www.apple.com/support/downloads/quicktime71.html>
• Standalone Apple QuickTime Player - <http://www.apple.com/quicktime/download/standalone.html>
• Mac OS X: Updating your software - <http://docs.info.apple.com/article.html?artnum=106704>

.

Revision History

• May 12, 2006: Initial release
  

Last updated