Credit to Damian Put working with TippingPoint's Zero Day Initiative for reporting this issue. For Mac OS X v10.6 systems, this issue is addressed in Mac OS X v10.6.5. This issue is addressed through improved handling of avi files. Viewing a maliciously crafted avi file may lead to an unexpected application termination or arbitrary code execution. Impact: Viewing a maliciously crafted avi file may lead to an unexpected application termination or arbitrary code executionĭescription: A memory corruption issue is in QuickTime's handling of avi files. Credit to Damian Put and Procyun, working with TippingPoint's Zero Day Initiative for reporting this issue. This issue is addressed through improved validation of JP2 images. Viewing a maliciously crafted JP2 image may lead to an unexpected application termination or arbitrary code execution. Credit to Nils of MWR InfoSecurity, and Will Dormann of the CERT/CC, for reporting this issue.ĭescription: An uninitialized memory access issue exists in QuickTime's handling of JP2 images. This issue is addressed through improved bounds checking.

Impact: Viewing a maliciously crafted JP2 image may lead to an unexpected application termination or arbitrary code executionĭescription: A heap buffer overflow exists in QuickTime's handling of JP2 images. Available for: Mac OS X v10.5.8, Mac OS X Server v10.5.8, Windows 7, Vista, XP SP2 or later

Quicktime download 7.6.9