Download Apple QuickTime 7.7.2

Apple has released a new version of its media player QuickTime. QuickTime is part of iTunes, but those who don’t need that program can also pick up the media player separately. QuickTime is available for Windows and Mac OS X and can be used to view pictures, listen to music, and play movie files. Version 7.7.2 has been released for Windows only and fixes many security vulnerabilities.

Isses fixes in Apple QuickTime version 7.7.2:

• Multiple stack overflows existed in QuickTime’s handling of TeXML files. These issues do not affect OS X systems. (CVE-2012-0663)
• A heap overflow existed in QuickTime’s handling of text tracks. This issue does not affect OS X systems. (CVE-2012-0664)
• A heap buffer overflow existed in the handling of H.264 encoded movie files. (CVE-2012-0665)
• An uninitialized memory access issue existed in the handling of MP4 encoded files. For OS X Lion systems, this issue is addressed in OS X Lion v10.7.3. For Mac OS X v10.6 systems, this issue is addressed in Security Update 2012-001. (CVE-2011-3458)
• An off by one buffer overflow existed in the handling of rdrf atoms in QuickTime movie files. For OS X Lion systems, this issue is addressed in OS X Lion v10.7.3. For Mac OS X v10.6 systems, this issue is addressed in Security Update 2012-001. (CVE-2011-3459)
• A buffer overflow existed in the handling of audio sample tables. For OS X Lion systems, this issue is addressed in OS X Lion v10.7.4. For Mac OS X v10.6 systems, this issue is addressed in Security Update 2012-002. (CVE-2012-0658)
• An integer overflow existed in the handling of MPEG files. For OS X Lion systems, this issue is addressed in OS X Lion v10.7.4. For Mac OS X v10.6 systems, this issue is addressed in Security Update 2012-002. (CVE-2012-0659)
• A stack buffer overflow existed in the QuickTime plugin’s handling of QTMovie objects. This issue does not affect OS X systems. (CVE-2012-0666)
• A buffer overflow existed in the handling of PNG files. For OS X Lion systems, this issue is addressed in OS X Lion v10.7.3. For Mac OS X v10.6 systems, this issue is addressed in Security Update 2012-001. (CVE-2011-3460)
• A signedness issue existed in the handling of QTVR movie files. This issue does not affect OS X systems. (CVE-2012-0667)
• A use after free issue existed in the handling of JPEG2000 encoded movie files. This issue does not affect systems prior to OS X Lion. For OS X Lion systems, this issue is addressed in OS X Lion v10.7.4. (CVE-2012-0661)
• A buffer overflow existed in the handling of RLE encoded movie files. (CVE-2012-0668)
• A buffer overflow existed in QuickTime’s handling of Sorenson encoded movie files. This issue does not affect OS X systems. (CVE-2012-0669)
• An integer overflow existed in QuickTime’s handling of sean atoms. (CVE-2012-0670)
• A memory corruption issue existed in the handling of .pict files. (CVE-2012-0671)
• A stack buffer overflow existed in QuickTime’s handling of file paths. This issue does not affect OS X systems. (CVE-2012-0265)
• An integer underflow existed in QuickTime’s handling of audio streams in MPEG files. (CVE-2012-066)