QuickTime 7.3.1: Security Fixes
December 13, 2007
Apple release Quicktime 7.3.1 for both Windows and OS-X operating systems today. The release addresses specific security issues found in QuickTime. Here's what Apple is saying about it:
Impact: Viewing a maliciously crafted RTSP movie may lead to an unexpected application termination or arbitrary code execution
Description: A buffer overflow exists in QuickTime's handling of Real Time Streaming Protocol (RTSP) headers. By enticing a user to view a maliciously crafted RTSP movie, an attacker may cause an unexpected application termination or arbitrary code execution. This update addresses the issue by ensuring that the destination buffer is sized to contain the data.
More specific details is available at
Apple's QuickTime Security Documents, and not surprisingly, Apple has updated its QuickTime Broadcaster software as well.
7.3.1 comes in four flavors, Tiger, Leopard, Panther or XP. The free update is available through software update or
download through the Apple website. It is a recommended update for all QuickTime 7 Users.
Labels: QuickTime, Software Update
Post a Comment