Alert GCSA-08004 Vulnerabilita' in Apple QuickTime

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1


*************************************************************************

    Alert ID : Alert GCSA-08004
        Data : 17 gennaio 2008
      Titolo : Vulnerabilita' in Apple QuickTime

*************************************************************************

:: Descrizione del problema

    Sono state identificate varie vulnerabilita' in Apple QuickTime.


:: Software interessato

    Apple Quick Time versioni precedenti alla 7.4


:: Impatto

    Denial of Service
    Esecuzione remota di codice arbitrario


:: Soluzione

    Aggiornare Quick Time alla versione 7.4
    http://www.apple.com/support/downloads/


:: Riferimenti

    Apple
    http://docs.info.apple.com/article.html?artnum=307301
    http://lists.apple.com/archives/security-announce/2008/Jan/msg00001.html

    FrSirt
    http://www.frsirt.com/english/advisories/2008/0148

    Secunia
    http://secunia.com/advisories/28502/

    Mitre's CVE ID
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0031
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0032
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0033
    http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-0036

    Securityfocus Bugtraq ID
    http://www.securityfocus.com/bid/27299

    US CERT
    http://www.us-cert.gov/cas/techalerts/TA08-016A.html

-----BEGIN PGP SIGNATURE-----

iQCVAwUBR49eZvOB+SpikaiRAQKkaQP8CIZ2DLuqYwh4qvkZrhquHV0BxG+nD7U6
EfEKN/yvx8ESrIXabdphEYSDclePU3ohtw1vneqw9ZHNUCd1V2K7yHiO2Fj1dfYc
FTTxm3Suif2t+mVPFyY1s2xDItVrvan9k+lNvywVRZ9WPhmTitCtd5oOqic/Dn/4
eokufRaI1OE=
=XIzS
-----END PGP SIGNATURE-----