QuickTime 7.4.1 improves security

Apple today released QuickTime 7.4.1 for Mac OS X Panther, Tiger, and Leopard as well as Microsoft Windows. The update beefs up security while improving compatibility with third-party applications. Users who don't update to QuickTime 7.4.1 could visit a maliciously crafted website that could lead to unexpected application termination, or arbitrary code execution.

"A heap buffer overflow exists in QuickTime's handling of HTTP responses when RTSP tunneling is enabled. By enticing a user to visit a maliciously crafted webpage, an attacker may cause an unexpected application termination or arbitrary code execution," Apple said. "This update addresses the issue through improved bounds checking."

Filed under: Apple, security
Other story tags: update, QuickTime

, 4

4 comments

Reader Reactions (Please use <i></i> for italic text)

subscribe to comments
for this article

Expand All

Global Settings

Super Glitcher

yeah...

02/06, 8:33pm, EST

What I need 'security' from is software update breaking my system.

I don't care about overflow - does it fix everything it broke in 7.4?? Do I get FinalCut and AfterEffects back??

guess I'm sticking with 7.3.1 ....

Dedicated MacNNer

Joined Aug 2003

User is offline

JackWebb

Agree!

02/06, 10:25pm, EST

Yep, and 7.3 broke some stuff that got fixed in 7.4. Hard to get a good release.

Fresh-Faced Recruit

Joined Aug 2007

User is offline

tonton

Agreed

02/07, 3:53am, EST

In addition to the problems with Final Cut and AE, 7.4 broke video playback for certain files, as well as subtitles when used with Perian.

Until I'm 100% sure Apple fixed these problems, I'm not risking 7.4.anything.

Mac Enthusiast

Joined Mar 2001

User is offline

UmarOMC

subject here

02/07, 8:21am, EST

"In addition to the problems with Final Cut and AE, 7.4 broke video playback for certain files, as well as subtitles when used with Perian."

According to QuickTime 7.4.1 users on VersionTracker this update fixed these problems. Perian is also updated...

Fresh-Faced Recruit

Joined Aug 2001

User is offline

Your Comments