Stan's List

QuickTime 7.5 patches a number of security issues:

Windows Vista, XP SP2:
Opening a maliciously crafted PICT image file may lead to an unexpected application termination or arbitrary code execution

Mac OS X v10.3.9, Mac OS X v10.4.9 - v10.4.11, Mac OS X v10.5 or later, Windows Vista, XP SP2:
Playing maliciously crafted QuickTime content in QuickTime Player may lead to arbitrary code execution

QuickTime 7.4.5 includes fixes that enhance reliability, improve compatibility with third-party applications, and address security issues. This release is recommended for all QuickTime 7 users. QuickTime 7.4.5 is available via Software Update or manual download for Leopard, Tiger and Panther.

Detailed information on the security content of this update.

Getting your media into Apple TV

Is the Apple TV, take two, sufficient to move the market? Certainly, its ability to log on to the Apple Movie Store has to be attractive. Order and receive movies from your favorite movie chair. While the resolution may not be the highest its not bad. There is one feature of the Apple TV that should be taken advantage of. All media you can load into iTunes can be displayed through Apple TV. Read the rest of this entry »

This QuickTime update addresses CVE-ID: CVE-2008-0234:

The update is available for: Mac OS X v10.3.9, Mac OS X v10.4.9 or later, Mac OS X v10.5 or later, Windows Vista, XP SP2

Impact: Visiting a malicious website may lead to an unexpected application termination or arbitrary code execution

Description: A heap buffer overflow exists in QuickTime’s handling of HTTP responses when RTSP tunneling is enabled. By enticing a user to visit a maliciously crafted webpage, an attacker may cause an unexpected application termination or arbitrary code execution. This update addresses the issue through improved bounds checking.

Available via Software Update or direct download.

The following updates are available via Software Update or from Apple’s Downloads page:

iTunes 7.6

Rent and download your favorite movies with iTunes on your computer or directly to your living room on Apple TV. Enjoy rented movies in sizes up to 720p HD with surround sound on your Apple TV and sizes up to DVD-quality on your computer. Transfer your rented movies from iTunes to your iPod or iPhone and enjoy them on the go.

Also, purchase and download your favorite TV shows, music, and more directly on your Apple TV. Effortlessly transfer purchases made on Apple TV back to your computer with iTunes.

QuickTime 7.4

QuickTime 7.4 addresses security issues and delivers:
- Numerous bug fixes
- Support for iTunes

This release is recommended for all QuickTime 7 users.

For detailed information on the security content of this update, please visit this website.

iMovie 7.1.1

This update addresses issues when publishing movies to a .Mac Web Gallery, improves overall stability, and addresses a number of other minor issues.

Front Row 2.1.2

This Front Row update provides for bug fixes and improved iTunes compatibility.

QuickTime 7.3.1, available in separate downloads for Panther, Tiger and Leopard; addressing the most recent security concerns.

CVE-2007-6166
Impact: Viewing a maliciously crafted RTSP movie may lead to an unexpected application termination or arbitrary code execution

CVE-2007-4706
Impact: Viewing a maliciously crafted QTL file may lead to an unexpected application termination or arbitrary code execution

CVE-2007-4707
Impact: Multiple vulnerabilities in QuickTime’s Flash media handler

Apple released an update for Mac OS X Server 10.5

What was addressed

Server Preferences

* Addresses an issue which could block adding external users to a newly-created group.

NetBoot

* Addresses an issue in which 10.5.x-based software images could lead to an unresponsive NetBoot client.

Open Directory

* Addresses an issue blocking control of client application access when usernames contain non-ASCII characters.
* Addresses intermittent Password Server errors.

SMB File Service

* Addresses an issue in which Microsoft Windows clients may misinterpret shared folders’ ACL settings.

QuickTime 7.3 for Leopard (download, 52.6MB)—Issues addressed include support for iTunes 7.5, updated support for creating iPhone-compatible web content, updated JavaScript support in the QuickTime Web Plug-in and numerous bug fixes.

Versions of QuickTime 7.3 for Panther and Tiger are available.

iTunes 7.5 (download, 41.1MB)—iTunes 7.5 features the ability to activate iPhone wherever service is offered and support for Phase, a new interactive music game designed exclusively for iPod nano (third generation), iPod classic, and iPod (fifth generation). This release also includes bug fixes to improve stability and performance.

Telestream’s Flip4Mac WMV Player internet plugin and components for QuickTime allows one to play Windows video files, .wma and .wmv in a Web browser as well as QuickTime Player.

Flip4Mac WMV Player 2.2.0.39 is available for download.

The preference pane in System Preferences under the “Update” tab, would only take me to version 2.1.3.10. Try it and see if it will download the latest.

According to Telestream, the new version 2.2.0.39 includes:

* Added JavaScript support to the browser plugins
* Added support for URL Stream Scripting
* Major encoding optimizations for Intel Mac
* Improved video quality when encoding 2-pass VBR
* Added support for manual Deactivation/Reactivation
* Improved ASX handling
* Improved support for MMS servers and live streams
* Improved compatibility with many different web sites
* Fixed drawing problems with Firefox
* Removed the user enabled “Create Streaming Movies” preference

A MacInTouch reader notes that after the update, songs purchased through iTunes can now be used in iLife applications projects and that project burned to DVD without requiring authorization.