Summary:  On September 12 2006 Apple released version 7.1.3 of its popular Quicktime media viewing application.  According to the vendor, release 7.1.3 addresses seven security vulnerabilities (all of which could result in application crash and/or arbitrary code execution).  According to analyses by various Internet Security organizations, one of the vectors of exploitation for items on this list of vulnerabilities requires user interaction (in the form of viewing specifically-crafted media files).

Recommended Actions:  Windows and MAC System Administrators and users of Quicktime <7.1.3 on the above-listed platforms are encouraged to read the vulnerability information (links provided below) and (if appropriate) install version 7.1.3 of Quicktime at their earliest convenience.

ITS Actions:  No additional specific actions are being taken to address this software update at the present time.  An update will be issued if any new actions are taken.

Resources:

Apple Security Content Document Page for Quicktime 7.1.3:
http://docs.info.apple.com/article.html?artnum=304357

SANS diary page on 7.1.3:
http://isc.sans.org/diary.php?storyid=1694

idefense advisory on vulnerabilities addressed by update 7.1.3:
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=413

Apple Quicktime Main page (includes links to downloads):
http://www.apple.com/quicktime/win.html