Apple fixes Windows Quicktime flaw

Patch doesn't affect Mac OS X systems, just Windows XP and Vista.

Apple today released security updates for the Windows version of Quicktime. The update is available from the Apple Downloads site.

The patch affects users of QuickTime 7.2 on Windows Vista, XP SP2, and addresses the vulnerability in CVE-2007-4673. Currently, viewing maliciously crafted Quicktime files may lead to arbitrary code execution. "A command injection issue exists in QuickTime's handling of URLs in the qtnext field in files with QTL content. By enticing a user to open a specially crafted file, an attacker may cause an application to be launched with controlled command line arguments, which may lead to arbitrary code execution," Apple describes.

About the author

    As CNET's former resident security expert, Robert Vamosi has been interviewed on the BBC, CNN, MSNBC, and other outlets to share his knowledge about the latest online threats and to offer advice on personal and corporate security.

     

    Join the discussion

    Conversation powered by Livefyre

    Don't Miss
    Hot Products
    Trending on CNET

    HOT ON CNET

    Still taking notes with pen and paper?

    Bump up your grades and school supplies with these laptops, desktops, and tablets!