QuickTime 7.7.9 Released

Apple have released a new version of their QuickTime multimedia player. Version 7.7.9 contains fixes for a bunch of vulnerabilities that could be exploited to run arbitrary code in target system.

Affected versions:
QuickTime versions earlier than 7.7.9 on Microsoft Windows 7 and Microsoft Windows Vista operating systems.

QuickTime users with version older than 7.7.9 should update to the latest one available.

More information about security content of QuickTime 7.7.9 can be read here.

QuickTime 7.7.8 Released

Apple have released a new version of their QuickTime multimedia player. Version 7.7.8 contains fixes for a bunch of vulnerabilities that could be exploited to run arbitrary code in target system.

Affected versions:
QuickTime versions earlier than 7.7.8 on Microsoft Windows 7 and Microsoft Windows Vista operating systems.

QuickTime users with version older than 7.7.8 should update to the latest one available.

More information about security content of QuickTime 7.7.8 can be read here.

QuickTime 7.7.5 Released

Apple have released a new version of their QuickTime. Version 7.7.5 contains fixes for a bunch of vulnerabilities that could be exploited to run arbitrary code in target system.

QuickTime users with version older than 7.7.5 should update to the latest one available.

More information about security content of QuickTime 7.7.5 can be read here.

QuickTime 7.7.3 Released

Apple have released a new version of their QuickTime. Version 7.7.3 contains fixes for a bunch of vulnerabilities that could be exploited to run arbitrary code in target system.

QuickTime users with version older than 7.7.3 should update to the latest one available.

More information about security content of QuickTime 7.7.3 can be read here.

QuickTime 7.7.2 Released

Apple has released a new version of their QuickTime. Version 7.7.2 contains fixes for a bunch of vulnerabilities that could be exploited to run arbitrary code in target system.

QuickTime users with version older than 7.7.2 should update to the latest one available.

More information about security content of QuickTime 7.7.2 can be read here.

QuickTime 7.7.1 Released

Apple has released new version of their QuickTime. Version 7.7.1 contains fixes for a bunch of vulnerabilities that could be exploited to run arbitrary code in target system.

QuickTime users with version older than 7.7.1 should update to the latest one available.

More information about security content of QuickTime 7.7.1 can be read here.

Apple Patches Vulnerabilities In QuickTime

Apple has released new version of their QuickTime. Version 7.6.9 contains fixes for a bunch of vulnerabilities that could be exploited to run arbitrary code in target system.

QuickTime users with version older than 7.6.9 should update to the latest one available.

More information about security content of QuickTime 7.6.9 can be read here.

QuickTime 7.6.8 Released

Apple has released new version of their QuickTime. Version 7.6.8 contains fixes for two vulnerabilities that could be exploited to run arbitrary code in target system:


QuickTime users with version older than 7.6.8 should update to the latest one available.

More information about security content of QuickTime 7.6.8 can be read here.

Vulnerability In Apple QuickTime ActiveX Component

There has been found a vulnerability in QTPlugin.ocx ActiveX component in Apple QuickTime. The vulnerability may allow arbitrary code execution on vulnerable installations of Apple QuickTime. It can be exploited by luring user to visit a malicious site or open a malicious file.

Vulnerable are Apple Quicktime 7.x and 6.x series (also versions released in 2004, older ones were not checked) on Windows XP, Windows Vista and Windows 7 with Internet Explorer in use. At the moment there's not a patch available yet but vulnerable control can be blocked by setting a kill bit on CLSID {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} or renaming QTPlugin.ocx file.

More information:
http://www.securityfocus.com/archive/1/513444
http://www.exploit-db.com/exploits/14843/
http://www.techworld.com.au/article/358857/old_apple_quicktime_code_puts_ie_users_harm_way

Security Patch For QuickTime Player

Apple has released a new version of their QuickTime media player. New version fixes a vulnerability that may make it possible for an attacker to cause system crash or to execute arbitrary code on target system. To exploit the vulnerability attacker can lure user to open specially crafted file.

The vulnerability affects QuickTime 7 for Windows versions prior 7.6.7. Users of vulnerable version should update to the latest one available.

More information about the security content of QuickTime 7.6.7 can be read here.

Apple Patches QuickTime Player Vulnerabilities

Apple has released a new version of their QuickTime media player. New version fixes 16 vulnerabilities that all make it possible for an attacker to execute arbitrary code in target system. To exploit the vulnerabilities attacker can lure user to open specially crafted file.

Vulnerabilities affect QuickTime versions prior 7.6.6. Users of vulnerable version should update to the latest one available.

More information about the security content of QuickTime 7.6.6 can be read here.

Vulnerabilities In QuickTime player

Apple has released new version of its QuickTime media player. Version 7.6.4 patches four critical vulnerabilities that when exploited may lead to an unexpected application termination or allow execution of arbitrary code.

Apple's QuickTime 7.6.4 related security document can be found here.

Users of vulnerable version are advised to download the latest version available.

Patched Apple QuickTime And Its Component Released

Apple has released a new version for QuickTime player. Version 7.6 fixes seven different vulnerabilities related to handling of audio and video contents. Vulnerabilities make it possibly to cause an unexpected application termination or arbitrary code execution on target machine.

Also, one vulnerability in QuickTime mpeg-2 playback component for Windows -component was fixed. Fixed problem is related to mpeg-2 file handling and makes it possible to cause an unexpected application termination or execute arbitrary code on target machine.

QuickTime 7.6 can be downloaded and installed via Software Update preferences, or from Apple Downloads.

The QuickTime MPEG-2 Playback Component is not installed by default, and is provided separately from QuickTime. Details are available via http://www.apple.com/quicktime/mpeg2.