Upgrading to QuickTime 7.2 patches vulnerability when working with Firefox

11th October 2007

Apple patched the vulnerability in the Windows version of its QuickTime player. The vulnerability was discovered last month, by a British researcher Petko D. Petkov. It was related to the QuickTime plugin for Firefox. Vulnerability enables the attackers to run unauthorized commands on victims` computer. This can be used to install dangerous programs, identity personal data theft or other malicious actions.
Firefox developers responded to reports of the researcher faster than Apple: browser`s version 2.0.0.7, which closed possibility to carry out malicious code through QuickTime file, was released already in late September.
The update for QuickTime works only with the latest version of the player 7.2.

Beta version of Windows XP Service Pack 3 is available for testers.