|
ALARM Group ALERT - click for a description of ALARM, The Computing Alert System
Alert Number: 051506-02
Alert Date: 5/15/06
Alert Title: Update for Quicktime addresses security vulnerabilities
Update-to: none
OS/Platform/Application: Apple Quicktime <7.1 on MAC and Windows systems
Category: ALERT
Severity: MEDIUM
Attention: Desktop support personnel, Quicktime Users on MAC and Windows platforms |
Summary: On May 11 2006 Apple released an updated version (7.1) of its popular Quicktime media viewer application. This update addresses 9 vulnerabilities that could lead to application crash/remote code execution through a variety of vectors such as viewing specifically crafted movie and image files.
Recommended Actions: Quicktime users on MAC and Windows platforms are encouraged to read the Update information (link provided below) and (if applicable) apply the update as soon as possible. Please NOTE that the default download configuration for Quicktime comes packaged with the iTunes application; users wishing to opt out of iTunes (based on privacy concerns, etc) should download the standalone version of QuickTime (link provided below):
ITS Actions: N/A
Resources:
Apple Security Content info page for QuickTime 7.1:
http://docs.info.apple.com/article.html?artnum=303752
Quicktime Download Page - including iTunes (Windows):
http://www.apple.com/quicktime/download/win.html
Quicktime Download Page - including iTunes (MAC):
http://www.apple.com/quicktime/download/mac.html
Quicktime STANDALONE Download Page - (Windows and MAC):
http://www.apple.com/quicktime/download/standalone.html
