This issue does not affect systems running Mac OS X. This update addresses the issue by not rendering content encoded with any version of the Indeo codec. Viewing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution. Impact: Viewing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution Description: An uninitialized memory access issue exists in the third-party Indeo v5 codec for QuickTime, which does not ship with QuickTime. The fixes were for both Mac OS X and Windows systems and were described as follows: QuickTimeĪvailable for: Windows Vista, XP SP2 and SP3
On Tuesday, Apple posted the complete list of security issues addressed with QuickTime 7.5.5 to its list server.