# MA-555.012016: MyCERT Advisory - Apple Releases Security Update for QuickTime

**Date:** 15 Jan 2016  
**Source:** https://www.mycert.org.my/portal/advisory?id=MA-555.012016  
**Advisory ID:** MA-555.012016

---

####
**1.0 Introduction**
Apple has released a security update to address multiple vulnerabilities in QuickTime for Windows 7 and Windows Vista. Multiple memory corruption issues existed in QuickTime. These issues were addressed through improved memory handling.
Users and administrators are encouraged to review the Apple security update page for QuickTime 7.7.9 and apply the necessary update.
**2.0 Impact**
Exploitation of these vulnerabilities could potentially allow a remote attacker to take control of the affected system.
Viewing a maliciously crafted movie file may lead to an unexpected application termination or arbitrary code execution.
**3.0 Affected Products**
Updates available for QuickTime 7.7.9 for Windows 7 and Windows Vista.
**4.0 Recommendations**
MyCERT highly recommended users of these applications to upgrade to the latest version of the affected products:
4.1 Security content of QuickTime 7.7.9
Please refer:
<https://support.apple.com/en-us/HT205638>
Software updates:
<http://www.apple.com/quicktime/download/>
4.2 Security updates for all Apple products
<https://support.apple.com/en-my/HT201222>
Generally, MyCERT advises the users of this software to be updated with the latest security announcements by the vendor and follow best practice security policies to determine which updates should be applied.
For further enquiries, please contact MyCERT through the following channels:
E-mail : [[email protected]](/cdn-cgi/l/email-protection#e2819b808790dbdbdba2819b80879091878197908b969bcc8f9b) or [[email protected]](/cdn-cgi/l/email-protection#75180c1610070135180c161007015b1a07125b180c) 
Phone : 1-300-88-2999 (monitored during business hours)
Fax : +603 89453442 
Handphone : +60 19 2665850 (24x7 call incident reporting)
SMS : CYBER999 REPORT EMAIL COMPLAINT to 15888
Business Hours : Mon - Fri 09:00 AM - 18:00 PM MYT
Web : [https://www.mycert.org.my](https://www.mycert.org.my/)
Twitter : <http://www.twitter.com/mycert>
Facebook: <http://www.facebook.com/mycert.org.my>
Cyber999 Mobile Apps:  [IOS Users](https://itunes.apple.com/my/app/cyber999-mobile-application/id888552400?mt=8&ign-mpt=uo%3D4) or [Android Users](https://play.google.com/store/apps/details?id=my.cyber999.mobile)
**5.0     References**
•    Apple Releases Multiple Security Updates: <https://www.us-cert.gov/ncas/current-activity/2016/01/08/Apple-Releases-Security-Update-QuickTime>
•    Apple QuickTime Security Update for January 2016: <http://tools.cisco.com/security/center/viewAlert.x?alertId=42943>
•    Apple Releases Security Update for QuickTime: <http://usgov.info/2016/01/08/apple-releases-security-update-for-quicktime-2/>