Researchers have discovered a number of flaws in Apple's QuickTime media player that can result in DoS attacks and remote system access.
Apple has released an update for the flaws as part of QuickTime’s latest version, detailing the group of nine flaws on its support website.
Malicious users could create corrupt QuickTime, Flash, H.264, MPEG4 and AVI movies or FlashPix, PICT, BMP and JPEG images to take advantage of the flaws, which can result in application crash or arbitrary code execution, according to numerous security advisories.
The new version can be downloaded via software update preferences or from Apple downloads, according to the Cupertino, Calif., company.
Mike Price of McAfee’s AVERT Labs discovered six of the nine flaws, according to vulnerability monitoring form Secunia.
The flaws were first discovered on March 7, according to eEye Digital Security, which also published an advisory for the flaws.
