Four Critical Holes in QuickTime Closed

Apple has released QuickTime version 7.6.4 for Mac OS X 10.4.11, Mac OS X 10.5.8, Windows 7, Vista and Windows XP SP3. The update closes four security holes through which an attacker could infect a systems. Viewing a crafted file in H.264, MPEG-4 or FlashPix format by, for example, downloading the file through a movie portal, was sufficient for infection.

The update for Mac OS X 10.4.11 and Mac OS X 10.5.8 is 57MB, while the Windows 7, Vista and Windows XP SP3 version is 31MB in size.

See also:

• About the security content of QuickTime 7.6.4, Apple's overview of the fixes.

(djwm)