QuickTime full changelog

Impact: Viewing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution
Description: Multiple memory corruption issues existed in QuickTime. These issues were addressed through improved memory handling

Processing a maliciously crafted file may lead to an unexpected application termination or arbitrary code execution
Multiple memory corruption issues existed in QuickTime. These issues were addressed through improved memory handling.

Improves security and is recommended for all QuickTime 7 users on Windows.

An uninitialized pointer issue existed in the handling of track lists. This issue was addressed through improved error checking.
A buffer overflow existed in the handling of H.264 encoded movie files. This issue was addressed through improved bounds checking.
An out of bounds byte swapping issue existed in the handling of QuickTime image descriptions. This issue was addressed through improved bounds checking.
A signedness issue existed in the handling of 'stsz' atoms. This issue was addressed through improved bounds checking.

# An uninitialized pointer issue existed in the handling of track lists. This issue was addressed through improved error checking.
# A buffer overflow existed in the handling of H.264 encoded movie files. This issue was addressed through improved bounds checking.
# An out of bounds byte swapping issue existed in the handling of QuickTime image descriptions. This issue was addressed through improved bounds checking.
# A signedness issue existed in the handling of 'stsz' atoms. This issue was addressed through improved bounds checking.
# A buffer overflow existed in the handling of 'ftab' atoms. This issue was addressed through improved bounds checking.
# A memory corruption issue existed in the handling of 'dref' atoms. This issue was addressed through improved bounds checking.
# A buffer overflow existed in the handling of 'ldat' atoms. This issue was addressed through improved bounds checking.

· Opening a maliciously crafted TeXML file may lead to an unexpected application termination or arbitrary code execution. A memory corruption issue existed in the handling of TeXML files. This issue was addressed through improved bounds checking.
· Playing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution. A buffer overflow existed in the handling of H.263 encoded movie files. This issue was addressed through improved bounds checking.
· Playing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution. A buffer overflow existed in the handling of 'dref' atoms. This issue was addressed through improved bounds checking.
· Playing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution. A buffer overflow existed in the handling of H.264 encoded movie files. This issue was addressed through improved bounds checking.

· Viewing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution. A buffer overflow existed in QuickTime's handling of H.264 encoded movie files.
· Viewing a maliciously crafted movie file may lead to the disclosure of memory contents. An uninitialized memory access issue existed in QuickTime's handling of URL data handlers within movie files.
· Viewing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution. An implementation issue existed in QuickTime's handling of the atom hierarchy within a movie file
· An attacker in a privileged network position may inject script in the local domain when viewing template HTML. A cross-site scripting issue existed in QuickTime Player's quot;Save for Webquot; export. The template HTML files generated by this feature referenced a script file from a non-encrypted origin.

· Viewing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution. A buffer overflow existed in QuickTime's handling of H.264 encoded movie files.
· Viewing a maliciously crafted movie file may lead to the disclosure of memory contents. An uninitialized memory access issue existed in QuickTime's handling of URL data handlers within movie files.
· Viewing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution. An implementation issue existed in QuickTime's handling of the atom hierarchy within a movie file
· An attacker in a privileged network position may inject script in the local domain when viewing template HTML. A cross-site scripting issue existed in QuickTime Player's quot;Save for Webquot; export. The template HTML files generated by this feature referenced a script file from a non-encrypted origin.

· Viewing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution. A buffer overflow existed in QuickTime's handling of H.264 encoded movie files.
· Viewing a maliciously crafted movie file may lead to the disclosure of memory contents. An uninitialized memory access issue existed in QuickTime's handling of URL data handlers within movie files.
· Viewing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution. An implementation issue existed in QuickTime's handling of the atom hierarchy within a movie file
· An attacker in a privileged network position may inject script in the local domain when viewing template HTML. A cross-site scripting issue existed in QuickTime Player's quot;Save for Webquot; export. The template HTML files generated by this feature referenced a script file from a non-encrypted origin.

QuickTime Player provides many exciting features:
· H.264 video support. Watch movies created with this state-of-the-art, standards-based codec which delivers exceptional-quality video at the lowest data rate possible.
· Live resize. Playback continues smoothly as you change the size of the QuickTime Player window.
· Zero-configuration streaming. Now QuickTime automatically determines the best Internet connection speed for your computer and adjusts it as necessary. And if a connection is lost during streaming, QuickTime automatically reconnects to the server.
· Surround sound. QuickTime Player can now play up to 24 channels of audio. With QuickTime 7, your PC, and surround speakers, you can enjoy the full effect of your surround sound movie or game.
· Improved playback controls. Use new playback controls to adjust settings for the best viewing experience. Easily change settings including jog shuttle, playback speed, bass, treble, and balance.