(pdp) Petkov of GNUCITIZEN working with TippingPoint’s Zero Day Initiative for reporting this issue.

Credit to Vinoo Thomas and Rahul Mohandas of McAfee Avert Labs, and Petko D. This update addresses the issue by revealing files in Finder or Windows Explorer rather than launching them. This may allow arbitrary applications and files to be launched when a user plays maliciously crafted QuickTime content in QuickTime Player. Impact: Playing maliciously crafted QuickTime content in QuickTime Player may lead to arbitrary code executionĭescription: A URL handling issue exists in QuickTime’s handling of file: URLs. Credit to an anonymous researcher working with TippingPoint’s Zero Day Initiative for reporting this issue. This update addresses the issue by not rendering Indeo video codec content. Viewing a maliciously crafted movie file with Indeo video codec content may lead to an unexpected application termination or arbitrary code execution. Impact: Viewing maliciously crafted Indeo video media content may lead to an unexpected application termination or arbitrary code executionĭescription: An issue in QuickTime’s handling of Indeo video codec content may result in a stack buffer overflow.

Credit to Liam O Murchu of Symantec for reporting this issue. This update addresses the issue through improved bounds checking. Opening a maliciously crafted PICT image file may lead to an unexpected application termination or arbitrary code execution. Credit to Dave Soldera of NGS Software, and Jens Alfke for reporting this issue.ĭescription: A heap buffer overflow exists in QuickTime’s handling of PICT images. There are many great features are security tools are added to protect the Mac and user’s privacy. It is recommended for all OS X Lion users and includes general operating system fixes. This update addresses the issue by performing additional validation of media files. Mac OS X Lion 10.7.5 DMG is an upgrade of OS X version 10.7 to improve the stability, compatibility, and security of the Mac. Opening a maliciously crafted media file may lead to an unexpected application termination or arbitrary code execution. Impact: Opening a maliciously crafted AAC-encoded media content may lead to an unexpected application termination or arbitrary code executionĭescription: A memory corruption issue exists in QuickTime’s handling of AAC-encoded media content. Credit to Dyon Balding of Secunia Research for reporting this issue.Īvailable for: Mac OS X v10.3.9, Mac OS X v10.4.9 – v10.4.11, Mac OS X v10.5 or later, Windows Vista, XP SP2 This issue does not affect systems running Mac OS X. Opening a maliciously crafted PICT image may lead to an unexpected application termination or arbitrary code execution. Impact: Opening a maliciously crafted PICT image file may lead to an unexpected application termination or arbitrary code executionĭescription: An issue in QuickTime’s handling of PixData structures when processing a PICT image may result in a heap buffer overflow. Apple today released QuickTime 7.5 for Mac and Windows which improves application compatibility and addresses security issues, including:

Quicktime 7.5 5 dmg