Apple releases QuickTime 7.4 with security fixes, (Tue, Jan 15th)

[Steve]

Apple has just released QuickTime 7.4 which fixes several security vulnerabilities:

CVE-2008-0031: A maliciously crafted Sorensen 3 movie file may lead to arbitrary code execution;
CVE-2008-0032: A maliciously crafted movie file may lead to arbitrary code execution during the handling of Macintosh resource records in movie files;
CVE-2008-0033: A maliciously crafted movie file may lead to arbitrary code execution during parsing of Image Descriptor atoms;
CVE-2008-0036: A maliciously crafted PICT image may lead to arbitrary code execution;

Note that this update does not yet appear to resolve the critical vulnerability reported last week by Luigi Auriemma (VU #112179).

More...