MacShrine

Apple has released QuickTime 7.1.5 and iTunes 7.1 via its Software Update pane and on the Web. Apple says: “QuickTime 7.1.5 delivers numerous bug fixes and addresses critical security issues. This update is recommended for all QuickTime 7 users.” With iTunes 7.1 you “can now enjoy your favorite iTunes movies, TV shows, music, and more from the comfort of your living room with Apple TV. iTunes 7.1 also supports a new full screen Cover Flow and improved sorting options to let you decide how iTunes should sort your favorite artists, albums, and songs.

Security researcher Tom Ferris has posted details on a security vulnerability that affects the latest versions of Apple’s iTunes and QuickTime software. A specially crafted .mov video file could cause a heap overflow and potentially give an attacker the ability to execute arbitrary code. Ferris first reported the problem earlier this month and says he notified Apple at that time. He says both Mac OS X and Windows machines are affected, as are older versions of iTunes and QuickTime. Security firm Secunia has rated the vulnerability “moderately critical”.