QuickTime 7.3 has been released, and includes fixes for issues that could lead to arbitrary code execution as the result of interacting with malicious image or movie files.

Description:

Apple Inc have released QuickTime 7.3 and have included numerous fixes to vulnerabilities present in previous versions. QuickTime 7.3 is available for both Windows and OS X platforms and users should update to the latest version as soon as practical.

Mitigation:

Update to QuickTime 7.3 from either the Software Update application, or from the download link below.

Updates:

http://www.apple.com/support/downloads/

Source:

http://docs.info.apple.com/article.html?artnum=61798

Exploits:

CVE-ID: CVE-2007-2395 (QuickTime) CVE-ID: CVE-2007-3750 (QuickTime) CVE-ID: CVE-2007-3751 (QuickTime) CVE-ID: CVE-2007-4672 (QuickTime) CVE-ID: CVE-2007-4676 (QuickTime) CVE-ID: CVE-2007-4675 (QuickTime) CVE-ID: CVE-2007-4677 (QuickTime)