Software Update: Apple QuickTime 7.7.5

Apple has released a new version of its media player QuickTime. QuickTime is available for Windows and OS X, and can be used to view pictures, listen to music, and play movie files. Version 7.7.5 has been released for Windows only and fixes many security vulnerabilities.

About the security content of QuickTime 7.7.5

• An uninitialized pointer issue existed in the handling of track lists. This issue was addressed through improved error checking.
• A buffer overflow existed in the handling of H.264 encoded movie files. This issue was addressed through improved bounds checking.
• An out of bounds byte swapping issue existed in the handling of QuickTime image descriptions. This issue was addressed through improved bounds checking.
• A signedness issue existed in the handling of ‘stsz’ atoms. This issue was addressed through improved bounds checking.
• A buffer overflow existed in the handling of ‘ftab’ atoms. This issue was addressed through improved bounds checking.
• A memory corruption issue existed in the handling of ‘dref’ atoms. This issue was addressed through improved bounds checking.
• A buffer overflow existed in the handling of ‘ldat’ atoms. This issue was addressed through improved bounds checking.
• A buffer overflow existed in the handling of PSD images. This issue was addressed through improved bounds checking.
• An out of bounds byte swapping issue existed in the handling of ‘ttfo’ elements. This issue was addressed through improved bounds checking.
• A buffer overflow existed in the handling of ‘clef’ atoms. This issue was addressed through improved bounds checking.