News 

The security update addresses a heap buffer overflow that exists in QuickTime's handling of HTTP responses when RTSP (real time streaming protocol) tunneling is enabled.

By enticing a user to visit a maliciously crafted webpage, an attacker may cause an unexpected application termination or arbitrary code execution. The

ADVERTISEMENT

update addresses the issue through improved bounds checking.

The update also fixes a problem that could prevent rendering in After Effects.

QuickTime 7.4.1 is available for Leopard, Panther and Tiger systems via Software Update or from apple.com/support/downloads.

Apple has also provided more details of the content of the latest iPhoto update. Through improved handling of format strings when processing photocast subscriptions, the update addresses a vulnerability that could let a remote attacker cause arbitrary code execution.

The update also enhances the resolution of images in a WebGallery to 1024x768, a change designed to improve viewingon the web and Apple TV.