QuickTime 7.4.1 updated with security fix

Apple today released yet another QuickTime 7 update – its main purpose being a security fix. The update is for Mac OS X Panther, Tiger, and Leopard as well as Microsoft Windows. The update secures QuickTime from the latest exploits and threats on both Mac OS X and Windows. Users who don’t update to QuickTime 7.4.1 could visit a maliciously crafted website that could lead to unexpected application termination, or arbitrary code execution.

“A heap buffer overflow exists in QuickTime’s handling of HTTP responses when RTSP tunneling is enabled. By enticing a user to visit a maliciously crafted webpage, an attacker may cause an unexpected application termination or arbitrary code execution,” Apple said. “This update addresses the issue through improved bounds checking.”

I have downloaded a lot of QuickTime security updates recently, it seems to be a platform that hackers are targeting – most likely because any exploits will affect both Windows and Mac. It may be annoying to have to continously download updates that don’t appear to add any functionality to the software; but it is good that Apple is keeping security a high priority.

Via [Macworld]