SillyDog701

[Antony]

Apple released QuickTime 7.4.5 software update.

QuickTime 7.4.5 update includes security-related enhancements, improved compatibility with third-party applications, and improved reliability.
The update also addresses issues where Java applets could potentially gain elevated privileges, downloading specially crafted movie files could result in information disclosure, and viewing maliciously crafted movies or PICT files could crash applications or lead to arbitrary code execution.

QuickTime 7.4.5 includes fixes that enhance reliability, improve compatibility with third-party applications, and address security issues. This release is recommended for all QuickTime 7 users.

For detailed information on the security content of this update, please visit this website: http://www.info.apple.com/kbnum/n61798 .

QuickTime 7.4.5 can be downloaded from Apple QuickTime website, it is available in separate versions for Mac OS X Leopard (56MB), Tiger (52MB), Panther (53MB) and Windows XP SP2 or Vista (22MB).

QuickTime 7 Pro allows users to easily creating movies for iPod or your mobile phone, capture movies in a single click, save movies from the web, share movies via email or .Mac, create stunning H.264 video, and much more. QuickTime 7 Pro license is US$29.99.

UserAgent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13

[Antony]

According to eWeek.com, Apple has tighten up the security on QuickTime.

[quote]The security hardening has also extended to QuickTime for Mac OS X, which gets:

1. Stack buffer safety checking (-fstack-protector to gcc)

2. Function call hardening, which should prevent some buffer overflows

Security researchers reacted to Apple's move with applause. "That's a pretty big change for a point release," said Dino Dai Zovi, a hacker who has written multiple exploits for QuickTime. "They [Apple] have way more guts than many other software companies to do something like that. Either that, or they are afraid of the backlash if malware starts targeting QuickTime and iTunes in a more serious way.â€

UserAgent: Mozilla/5.0 (Macintosh; U; Intel Mac OS X; en-US; rv:1.8.1.13) Gecko/20080311 Firefox/2.0.0.13