January 23, 2009 7:38 AM PST

Apple issues critical security update for QuickTime

by Dawn Kawamoto
  • Font size
  • Print
  • 19 comments

Apple has issued a critical security update for QuickTime media player, aimed at resolving vulnerabilities that could potentially allow a malicious attacker to take control of a person's computer, according to an Apple advisory released this week.

People running QuickTime 7 for Windows and for Mac OS X, are affected, as well as those who are using Mac OS X 10.4 or Mac OS X 10.5, according to Apple.

Apple is advising people to update to QuickTime 7.6 for Windows, QuickTime 7.6 for Leopard, or QuickTime 7.6 for Tiger.

The update seeks to address QuickTime security flaws that could potentially allow a malicious attacker to launch a buffer overflow and execute arbitrary code on a user's system.

The attack could potentially occur via a maliciously crafted movie file, AVI movie file, QTVR movie file, or an RTSP URL, according to Apple.

Security researcher Secunia, in an advisory released Thursday, noted the vulnerabilities are considered "highly critical."

Dawn Kawamoto covers enterprise security and financial news relating to technology for CNET News. E-mail Dawn.
Recent posts from Apple
Ex-Googler Lee sees Apple tablet debut in January
Apple misses its mark on Windows 7 Boot Camp support
Report: Apple event to be held January 26
Apple wins appeal in earbud hearing-loss lawsuit
Aha! It's the iGuide, not iSlate--maybe
Nokia hits Apple with latest patent complaint
Analyst: Apps the secret to Apple's tablet success
AT&T resumes online iPhone sales in NY
Add a Comment (Log in or register) (19 Comments)
  • prev
  • 1
  • next
by myles taylor January 23, 2009 7:57 AM PST
Was that today or yesterday?
Reply to this comment
by Perry_Clease January 23, 2009 8:14 AM PST
The day before
by BK216 January 23, 2009 8:06 AM PST
Oh Noes
Reply to this comment
by bunner05 January 23, 2009 8:20 AM PST
UMM, so this isn't current news......thanks for the update
Reply to this comment
by john55440 January 23, 2009 8:20 AM PST
QuickTime is a small program, with a constant stream of security holes. Talk about programming incompetence.
Reply to this comment
by solu1978 January 23, 2009 9:07 AM PST
Why does Apple sound like Microsoft (-:
Reply to this comment
by Perry_Clease January 23, 2009 9:28 AM PST
MicroSoft "quickly" fixes software security problems?
by KoldFusion January 24, 2009 9:48 PM PST
This would be because more people are using Apple products now.

The more people who drive Vehicle A. The higher percentage Vehicle A gets into car accidents.
by kcotham January 23, 2009 9:27 AM PST
Old "news".
Reply to this comment
by morlamweb January 23, 2009 10:19 AM PST
It *is* news in case you missed Apple's advisory, which was released all of two days ago. I'd hardly call that "old news". Thanks, Dawn.
Reply to this comment
by loose_screw January 23, 2009 10:23 AM PST
Does this affect Quicktime Alternative users?
Reply to this comment
by Get_Bent January 23, 2009 2:46 PM PST
Yes. QuickTime Alternative and QT Lite have been updated to 2.8.0.
by loose_screw January 23, 2009 4:58 PM PST
Thanks!
by stefanvolos January 23, 2009 12:16 PM PST
Uploaded and installed the QT 7.6 update at the office and have been experiencing unusual desktop behaviors... windows opening and closing unexpectedly... intermittent screen refreshes... Finder coming to the foreground by itself.

Anyone else out there experiencing difficulties after installation?
Reply to this comment
by stefanvolos January 23, 2009 12:43 PM PST
FYI: This problem is resolved by changing the System Preferences for Stuffit AVR (Archive Via Rename) to "OFF"
by jeffw08 January 30, 2009 6:34 AM PST
that happened to me yesterday and i thought i would lose my mind. thanks for the fix. however, on restart this morning, i had to turn it off again, it had defaulted. what's up?
by goodspeed8701 January 23, 2009 12:24 PM PST
Another Quicktime issue... Apple get your heads right. Oh i dont use any iwapple and icrapple product. looks good but doesn't do much.
Reply to this comment
by myles taylor January 23, 2009 7:37 PM PST
Oh yes, shame on Apple for not making 100% perfect software. I mean, all....the...other (looks around) software companies are making perfect software.

Doesn't do much? It's a computer and it does what a computer does. What do you do on a computer that you can't do on an Apple? What about the iPhone...doesn't do much?
by ferretboy88 January 24, 2009 11:10 AM PST
Quicktime is the worse software ever. Swiss cheese.
Reply to this comment
(19 Comments)
  • prev
  • 1
  • next
advertisement
Click Here

15 sites that went kaput in 2009

Web sites launch all the time, but they also shut their doors. We highlight 15 that bit the dust this year.

Top 10 news stories of the decade

Let the debate begin: Was the iPhone more important than iTunes? Was anything bigger than Google finding a great business model? CNET offers its list of the 10 most important stories of the '00s.

About Apple

At the start of the 21st century, there's no tech outfit more influential than Apple. CNET News' Erica Ogg and other reporters will attempt to make sense of the rumors, hype, products, and people that will shape the future of the company. But Apple's not the only game in town, as the established cell phone companies and others strike back against the iPhone. E-mail Erica at erica.ogg@cnet.com.

Add this feed to your online news reader

Apple topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right