• On MovieTome: The 10 worst movies of 2009 so far!
January 23, 2009 7:38 AM PST

Apple issues critical security update for QuickTime

by Dawn Kawamoto
  • Font size
  • Print
  • 19 comments
Share

Apple has issued a critical security update for QuickTime media player, aimed at resolving vulnerabilities that could potentially allow a malicious attacker to take control of a person's computer, according to an Apple advisory released this week.

People running QuickTime 7 for Windows and for Mac OS X, are affected, as well as those who are using Mac OS X 10.4 or Mac OS X 10.5, according to Apple.

Apple is advising people to update to QuickTime 7.6 for Windows, QuickTime 7.6 for Leopard, or QuickTime 7.6 for Tiger.

The update seeks to address QuickTime security flaws that could potentially allow a malicious attacker to launch a buffer overflow and execute arbitrary code on a user's system.

The attack could potentially occur via a maliciously crafted movie file, AVI movie file, QTVR movie file, or an RTSP URL, according to Apple.

Security researcher Secunia, in an advisory released Thursday, noted the vulnerabilities are considered "highly critical."

Dawn Kawamoto covers enterprise security and financial news relating to technology for CNET News. E-mail Dawn.
Recent posts from Apple
Apple grabs top U.S. retail sales spots in October
Apple updates Mac Pro with 3.33GHz chip option
Time shows off tablet-size version of Sports Illustrated
Psystar said to have deal with Apple
Report: Apple accused of NAND price manipulation
What if: Apple Newton vs. Apple iPhone
Apple App Store collector's items: 10 rarities
iPhone officially lands in South Korea
Add a Comment (Log in or register) (19 Comments)
  • prev
  • 1
  • next
by myles taylor January 23, 2009 7:57 AM PST
Was that today or yesterday?
Reply to this comment
by Perry_Clease January 23, 2009 8:14 AM PST
The day before
by BK216 January 23, 2009 8:06 AM PST
Oh Noes
Reply to this comment
by bunner05 January 23, 2009 8:20 AM PST
UMM, so this isn't current news......thanks for the update
Reply to this comment
by john55440 January 23, 2009 8:20 AM PST
QuickTime is a small program, with a constant stream of security holes. Talk about programming incompetence.
Reply to this comment
by solu1978 January 23, 2009 9:07 AM PST
Why does Apple sound like Microsoft (-:
Reply to this comment
by Perry_Clease January 23, 2009 9:28 AM PST
MicroSoft "quickly" fixes software security problems?
by KoldFusion January 24, 2009 9:48 PM PST
This would be because more people are using Apple products now.

The more people who drive Vehicle A. The higher percentage Vehicle A gets into car accidents.
by kcotham January 23, 2009 9:27 AM PST
Old "news".
Reply to this comment
by morlamweb January 23, 2009 10:19 AM PST
It *is* news in case you missed Apple's advisory, which was released all of two days ago. I'd hardly call that "old news". Thanks, Dawn.
Reply to this comment
by loose_screw January 23, 2009 10:23 AM PST
Does this affect Quicktime Alternative users?
Reply to this comment
by Get_Bent January 23, 2009 2:46 PM PST
Yes. QuickTime Alternative and QT Lite have been updated to 2.8.0.
by loose_screw January 23, 2009 4:58 PM PST
Thanks!
by stefanvolos January 23, 2009 12:16 PM PST
Uploaded and installed the QT 7.6 update at the office and have been experiencing unusual desktop behaviors... windows opening and closing unexpectedly... intermittent screen refreshes... Finder coming to the foreground by itself.

Anyone else out there experiencing difficulties after installation?
Reply to this comment
by stefanvolos January 23, 2009 12:43 PM PST
FYI: This problem is resolved by changing the System Preferences for Stuffit AVR (Archive Via Rename) to "OFF"
by jeffw08 January 30, 2009 6:34 AM PST
that happened to me yesterday and i thought i would lose my mind. thanks for the fix. however, on restart this morning, i had to turn it off again, it had defaulted. what's up?
by goodspeed8701 January 23, 2009 12:24 PM PST
Another Quicktime issue... Apple get your heads right. Oh i dont use any iwapple and icrapple product. looks good but doesn't do much.
Reply to this comment
by myles taylor January 23, 2009 7:37 PM PST
Oh yes, shame on Apple for not making 100% perfect software. I mean, all....the...other (looks around) software companies are making perfect software.

Doesn't do much? It's a computer and it does what a computer does. What do you do on a computer that you can't do on an Apple? What about the iPhone...doesn't do much?
by ferretboy88 January 24, 2009 11:10 AM PST
Quicktime is the worse software ever. Swiss cheese.
Reply to this comment
(19 Comments)
  • prev
  • 1
  • next
advertisement
Click Here

The yogurt makers of tech: Gadgets to avoid

Don't buy these one-trick ponies--unless you like gizmos that gather dust.

Google wants to unclog Net's DNS plumbing

The Net giant, ever eager for a faster Internet, debuts its Google Public DNS service. With it, Google could become even more central to the Net.

About Apple

At the start of the 21st century, there's no tech outfit more influential than Apple. CNET News' Erica Ogg and other reporters will attempt to make sense of the rumors, hype, products, and people that will shape the future of the company. But Apple's not the only game in town, as the established cell phone companies and others strike back against the iPhone. E-mail Erica at erica.ogg@cnet.com.

Add this feed to your online news reader

Apple topics

advertisement
advertisement

Inside CNET News

Scroll Left Scroll Right