Apple QuickTime Multiple Arbitrary Code Execution Vulnerabilities

Bugtraq ID:	36328
Class:	Unknown
CVE:	CVE-2009-2202 CVE-2009-2203 CVE-2009-2798 CVE-2009-2799
Remote:	Yes
Local:	No
Published:	Sep 09 2009 12:00AM
Updated:	Nov 10 2009 03:26PM
Credit:	Tom Ferris of the Adobe Secure Software Engineering Team, Alex Selivanov, Damian Put working with TippingPoint and the Zero Day Initiative, and an anonymous researcher working with TippingPoint and the Zero Day Initiative
Vulnerable:	Apple QuickTime Player 7.6.2 Apple QuickTime Player 7.6.1 Apple QuickTime Player 7.5.5 + Apple Mac OS X 10.4.9 + Apple Mac OS X 10.3.9 + Apple Mac OS X 10.5 + Apple Mac OS X Server 10.4.9 + Apple Mac OS X Server 10.3.9 + Apple Mac OS X Server 10.5 Apple QuickTime Player 7.4.5 + Apple Mac OS X 10.4.9 + Apple Mac OS X 10.3.9 + Apple Mac OS X 10.5 + Apple Mac OS X Server 10.4.9 + Apple Mac OS X Server 10.3.9 + Apple Mac OS X Server 10.5 Apple QuickTime Player 7.4.1 Apple QuickTime Player 7.3.1 .70 Apple QuickTime Player 7.3.1 Apple QuickTime Player 7.1.6 Apple QuickTime Player 7.1.5 Apple QuickTime Player 7.1.4 Apple QuickTime Player 7.1.3 Apple QuickTime Player 7.1.2 Apple QuickTime Player 7.1.1 Apple QuickTime Player 7.0.4 Apple QuickTime Player 7.0.3 Apple QuickTime Player 7.0.2 Apple QuickTime Player 7.0.1 Apple QuickTime Player 7.0 Apple QuickTime Player 6.5.2 Apple QuickTime Player 6.5.1 Apple QuickTime Player 6.5 Apple QuickTime Player 6.1 Apple QuickTime Player 5.0.2 - Apple Mac OS 9 9.2.2 - Apple Mac OS 9 9.2.2 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0 - Apple Mac OS 9 9.0 - Apple Mac OS X 10.1.5 - Apple Mac OS X 10.1.5 - Apple Mac OS X 10.1.4 - Apple Mac OS X 10.1.4 - Apple Mac OS X 10.1.3 - Apple Mac OS X 10.1.3 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.1 - Apple Mac OS X 10.1.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0 - Apple Mac OS X 10.0 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows 2000 Server - Microsoft Windows 2000 Terminal Services SP2 - Microsoft Windows 2000 Terminal Services SP2 - Microsoft Windows 2000 Terminal Services SP1 - Microsoft Windows 2000 Terminal Services SP1 - Microsoft Windows 2000 Terminal Services - Microsoft Windows 2000 Terminal Services - Microsoft Windows 95 SR2 - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows ME - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Terminal Server 4.0 SP6a - Microsoft Windows NT Terminal Server 4.0 SP6 - Microsoft Windows NT Terminal Server 4.0 SP6 - Microsoft Windows NT Terminal Server 4.0 SP5 - Microsoft Windows NT Terminal Server 4.0 SP5 - Microsoft Windows NT Terminal Server 4.0 SP4 - Microsoft Windows NT Terminal Server 4.0 SP4 - Microsoft Windows NT Terminal Server 4.0 SP3 - Microsoft Windows NT Terminal Server 4.0 SP3 - Microsoft Windows NT Terminal Server 4.0 SP2 - Microsoft Windows NT Terminal Server 4.0 SP2 - Microsoft Windows NT Terminal Server 4.0 SP1 - Microsoft Windows NT Terminal Server 4.0 SP1 - Microsoft Windows NT Terminal Server 4.0 - Microsoft Windows NT Terminal Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows NT Workstation 4.0 Apple QuickTime Player 7.6 Apple QuickTime Player 7.5 Apple QuickTime Player 7.4 Apple QuickTime Player 7.4 Apple QuickTime Player 7.3 Apple QuickTime Player 7.2 Apple QuickTime Player 7.1 Apple QuickTime Player 6.4 - Apple Mac OS 9 9.2.2 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0 - Apple Mac OS X 10.1.5 - Apple Mac OS X 10.1.4 - Apple Mac OS X 10.1.3 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows 2000 Terminal Services SP2 - Microsoft Windows 2000 Terminal Services SP1 - Microsoft Windows 2000 Terminal Services - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Terminal Server 4.0 SP6a - Microsoft Windows NT Terminal Server 4.0 SP6 - Microsoft Windows NT Terminal Server 4.0 SP5 - Microsoft Windows NT Terminal Server 4.0 SP4 - Microsoft Windows NT Terminal Server 4.0 SP3 - Microsoft Windows NT Terminal Server 4.0 SP2 - Microsoft Windows NT Terminal Server 4.0 SP1 - Microsoft Windows NT Terminal Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 Apple QuickTime Player 6 - Apple Mac OS 9 9.2.2 - Apple Mac OS 9 9.2.2 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2.1 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.2 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.1 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0.4 - Apple Mac OS 9 9.0 - Apple Mac OS 9 9.0 - Apple Mac OS X 10.1.5 - Apple Mac OS X 10.1.4 - Apple Mac OS X 10.1.4 - Apple Mac OS X 10.1.3 - Apple Mac OS X 10.1.3 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.2 - Apple Mac OS X 10.1.1 - Apple Mac OS X 10.1.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.1 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.4 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.3 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.2 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0.1 - Apple Mac OS X 10.0 - Apple Mac OS X 10.0 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP2 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server SP1 - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Advanced Server - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP2 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server SP1 - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Datacenter Server - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP2 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional SP1 - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Professional - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP2 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server SP1 - Microsoft Windows 2000 Server - Microsoft Windows 2000 Server - Microsoft Windows 2000 Terminal Services SP2 - Microsoft Windows 2000 Terminal Services SP2 - Microsoft Windows 2000 Terminal Services SP1 - Microsoft Windows 2000 Terminal Services SP1 - Microsoft Windows 2000 Terminal Services - Microsoft Windows 2000 Terminal Services - Microsoft Windows 95 SR2 - Microsoft Windows 95 SR2 - Microsoft Windows 95 - Microsoft Windows 95 - Microsoft Windows 98 - Microsoft Windows 98 - Microsoft Windows 98SE - Microsoft Windows 98SE - Microsoft Windows ME - Microsoft Windows ME - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6a - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP6 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP5 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP4 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP3 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP2 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 SP1 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Enterprise Server 4.0 - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6a - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP6 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP5 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP4 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP3 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP2 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 SP1 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Server 4.0 - Microsoft Windows NT Terminal Server 4.0 SP6a - Microsoft Windows NT Terminal Server 4.0 SP6 - Microsoft Windows NT Terminal Server 4.0 SP6 - Microsoft Windows NT Terminal Server 4.0 SP5 - Microsoft Windows NT Terminal Server 4.0 SP5 - Microsoft Windows NT Terminal Server 4.0 SP4 - Microsoft Windows NT Terminal Server 4.0 SP4 - Microsoft Windows NT Terminal Server 4.0 SP3 - Microsoft Windows NT Terminal Server 4.0 SP3 - Microsoft Windows NT Terminal Server 4.0 SP2 - Microsoft Windows NT Terminal Server 4.0 SP2 - Microsoft Windows NT Terminal Server 4.0 SP1 - Microsoft Windows NT Terminal Server 4.0 SP1 - Microsoft Windows NT Terminal Server 4.0 - Microsoft Windows NT Terminal Server 4.0 - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6a - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP6 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP5 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP4 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP3 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP2 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 SP1 - Microsoft Windows NT Workstation 4.0 - Microsoft Windows NT Workstation 4.0 Apple Quicktime 7.2 Apple Mac OS X Server 10.6.1 Apple Mac OS X Server 10.6 Apple Mac OS X 10.6.1 Apple Mac OS X 10.6
Not Vulnerable:	Apple QuickTime Player 7.6.4 Apple Mac OS X Server 10.6.2 Apple Mac OS X 10.6.2

Apple QuickTime Multiple Arbitrary Code Execution Vulnerabilities

Apple QuickTime is prone to multiple vulnerabilities that may allow remote attackers to execute arbitrary code.

These issues arise when the application handles specially crafted H.264, MPEG-4, and FlashPix video files. Successful exploits may allow attackers to execute arbitrary code in the context of the currently logged-in user; failed exploit attempts will cause denial-of-service conditions.

Versions prior to QuickTime 7.6.4 are vulnerable on Windows 7, Vista, XP, and Mac OS X platforms.

Apple QuickTime Multiple Arbitrary Code Execution Vulnerabilities

Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

A commercial proof of concept for CVE-2009-2798 is available through VUPEN Security - Exploit and PoCs Service. This proof of concept is not otherwise publicly available or known to be circulating in the wild.

Apple QuickTime Multiple Arbitrary Code Execution Vulnerabilities

Solution:
The vendor has released an advisory and fixes. Please see the references for details.


Apple QuickTime Player 7.1

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple Mac OS X Server 10.6

• Apple MacOSXServerUpdCombo10.6.2.dmg
  For Mac OS X Server v10.6
  http://www.apple.com/support/downloads/

Apple QuickTime Player 7.4

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 6

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.2

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.5

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.3

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple Quicktime 7.2

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.6

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple Mac OS X 10.6

• Apple MacOSXUpdCombo10.6.2.dmg
  For Mac OS X v10.6
  http://www.apple.com/support/downloads/

Apple QuickTime Player 6.4

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.4

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple Mac OS X 10.6.1

• Apple MacOSXUpd10.6.2.dmg
  For Mac OS X v10.6.1
  http://www.apple.com/support/downloads/

Apple Mac OS X Server 10.6.1

• Apple MacOSXServerUpd10.6.2.dmg
  For Mac OS X Server v10.6.1
  http://www.apple.com/support/downloads/

Apple QuickTime Player 5.0.2

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 6.1

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 6.5

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 6.5.1

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 6.5.2

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.0

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.0.1

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.0.2

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.0.3

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.0.4

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.1.1

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.1.2

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.1.3

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.1.4

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.1.5

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.1.6

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.3.1 .70

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.3.1

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.4.1

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.4.5

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.5.5

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.6.1

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.6.2

• Apple APPLE-SA-2009-09-09-2 iTunes64Setup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 iTunesSetup.exe
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Leopard.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTime764_Tiger.dmg
  http://www.apple.com/quicktime/download/


• Apple APPLE-SA-2009-09-09-2 QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Multiple Arbitrary Code Execution Vulnerabilities

References:

• Apple QuickTime Homepage (Apple)
  
• ZDI-09-063: Apple QuickTime H.264 Nal Unit Length Heap Overflow Vulnerability (ZDI Disclosures )
  
• ZDI-09-064: Apple QuickTime FlashPix Sector Size Overflow Vulnerability (ZDI Disclosures )