Download Apple Mac OS X Security Update 2007-001

Apple just released its first security update of this year out the door for Mac OS X. The update is named Security Update 2007-001 included and made available for OS X versions 10.4.8 and 10.3.9. Security Update 2007-001 resolves a buffer overflow in QuickTime 7.1.3. What exactly this bug looks like is described below:

Security Update 2007-001 is recommended for all users and improves the security of the following components: QuickTime.

Description: A buffer overflow exists in QuickTime’s handling of RTSP URLs. By enticing a user to access a maliciously-crafted RTSP URL, an attacker can trigger the buffer overflow, which may lead to arbitrary code execution. A QTL file that triggers this issue has been published on the Month of Apple Bugs web site (MOAB-01-01-2007). This update addresses the issue by performing additional validation of RTSP URLs.[break]