Apple Plugs QuickTime Security Holes
9 Comments
Apple on Monday put out new releases of iTunes and QuickTime for both Mac OS X and Windows, adding support for the company's Apple TV product in the former and patching 8 serious security holes in the latter.
Each of the flaws could enable an attacker to create a malicious QuickTime file that, when run, executes arbitrary code and could lead to a full system compromise. Affected file types that have been corrected include QuickTime, MIDI, 3GP, PICT and QTIF files. iTunes 7.1 and QuickTime 7.1.5 are available for download on FileForum.