The update to version 7.1.5 resolves flaws that can be exploited through the execution of arbitrary code should users click on a maliciously crafted media file.
The bugs involve the digital video software’s handling of 3GP video files, MIDI files, QuickTime movie files, UDTA atoms, PICT files and QTIF files.
If an attacker dupes a user into opening the malicious file, he can trigger either an integer or buffer overflow, which can cause an application crash or result in remote code execution.
Vulnerability tracking firm Secunia rated the flaws "highly critical."
"If you use QuickTime, I would definitely recommend that you install the update as soon as possible as some of those security vulnerabilities look nasty," SANS Internet Storm Center handler Bojan Zdrnja told readers late Monday.
An Apple spokesperson could not be reached for comment.
Apple QuickTime update patches critical flaws
Apple has plugged eight vulnerabilities in QuickTime by announcing the release of a new version.
Add iTnews as your trusted source
Got a news tip for our journalists? Share it with us anonymously here.
Partner Content
iTnews State of Security Breakfast comes to Sydney
.png&h=140&w=231&c=1&s=0)
Promoted Content
From ambition to impact: The next era of government transformation.
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
The AI era demands a new kind of network
.jpg&h=140&w=231&c=1&s=0)
Promoted Content
Australian mid-market businesses to access deeper AI and security expertise with First Focus-Integris partnership
What’s Next?
Cloud Resilience Summit
iTnews Benchmark Security Awards 2026
iTnews State of Security Breakfast Sydney
iTnews Executive Retreat - Security Leaders Edition - VIC
