14 DAY TRIAL // Just as WWDC '08 concluded, Mac and Windows owners worldwide are now receiving a software update from Apple. While not affecting Mac owners as much, an issue in QuickTime's handling of PixData structures when processing a PICT image could result in a heap buffer overflow, which may ultimately lead to unexpected application termination or arbitrary code execution. Apple has fixed this issue, thanks to Dyon Balding of Secunia Research.
QuickTime 7.5 "improves application compatibility and addresses security issues," and is recommended for all QuickTime 7 users, Apple notes. The issue found with QuickTime 7.4.5 is classified as follows on Apple's official website:
Impact: Opening a maliciously crafted PICT image file may lead to an unexpected application termination or arbitrary code execution
Description: An issue in QuickTime's handling of PixData structures when processing a PICT image may result in a heap buffer overflow. Opening a maliciously crafted PICT image may lead to an unexpected application termination or arbitrary code execution. This update addresses the issue through improved bounds checking. This issue does not affect systems running Mac OS X. Credit to Dyon Balding of Secunia Research for reporting this issue.
You may update to QuickTime 7.5 following these links:
QuickTime 7.50.61.0 for Windows (available for Windows Vista, XP SP2)
Apple QuickTime 7 delivers outstanding multi-channel audio, using up to 24 channels. Using Apple's media player, you can also export content to iPhone, iPod, and Apple TV, capture movies and share them with your friends, or encode with the new H.264 video codec for better quality.
Along with the unveiling of Snow Leopard (OS X 10.6), Apple also introduced QuickTime X. While not available for another year (or so), the streamlined, next-generation platform advances modern media and Internet standards, using media technology pioneered in OS X iPhone, Apple claims. QuickTime X features optimized support for modern codecs but also more efficient media playback. QuickTime X is said to be ideal for any application that needs to play media content.
For more information about the security content of QuickTime 7.5, visit Apple's Support page.