Apple releases QuickTime 7.0.1

Apple has released QuickTime 7.0.1, which is available either through Software Update or as a standalone Web download [25.7 MB].

The new release provides several important bug fixes, a security enhancement, and improved compatibility with Final Cut Studio. This update is recommended for all QuickTime 7 users.

Specifically, the security enhancement patches a vulnerability where, with QuickTime 7.0, a QuickTime movie containing a maliciously crafted Quartz Composer object can leak data to an arbitrary web location.

Apple's description reads:

"Quartz Composer objects can be wrapped in a QuickTime track and delivered as a QuickTime movie. With QuickTime 7.0, a Quartz Composer object can gather local data and send it using an encoded URL to an arbitrary web location. The QuickTime 7.0.1 update modifies the QuickTime Quartz Composer Plugin to prevent access to remote web locations. Credit to David Remahl (www.remahl.se/david) for reporting this issue."

If you are having problems with the new release, please let us know.

Resources