Alert GCSA-07026 - Vulnerabilita' multiple in Apple QuickTime

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

******************************************************************

      Alert ID : GCSA-07026
          Data : 6 Marzo 2007
        Titolo : Vulnerabilita' multiple in Apple QuickTime

******************************************************************


:: Descrizione del problema

   Sono state identificate e risolte varie vulnerabilita' in Apple
   QuickTime. Tali vulnerabilita' possono essere sfruttate da un
   attaccante remoto per prendere il controllo completo di un sistema
   che ne sia affetto.

   Per una descrizione completa delle vulnerabilita' fare riferimento
   alla segnalazione ufficiale di Apple al link seguente:

   http://docs.info.apple.com/article.html?artnum=305149


:: Software e piattaforme interessate

   Apple QuickTime versione 7.1.4 e precedenti
     per Mac OS X v10.3.9 e succesive versioni
     per Windows Vista/XP/2000


:: Impatto

   Esecuzione di codice arbitrario


:: Soluzione

   Aggiornare il software alla versione 7.1.5:
   http://www.apple.com/quicktime/download/


:: Riferimenti

Apple
   http://docs.info.apple.com/article.html?artnum=305149

FrSirt:
   http://www.frsirt.com/english/advisories/2007/0825

SecurityFocus BID
   http://www.securityfocus.com/bid/22827/

Secunia
   http://secunia.com/advisories/24359/

Mitre's CVE ID:
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0711
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0712
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0713
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0714
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0715
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0716
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0717
   http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2007-0718

-----BEGIN PGP SIGNATURE-----

iQCVAwUBRe2Y+POB+SpikaiRAQI8yAP9FWQUBTrEDgCB//kkgFokUXvRWlJs/qHq
hNgjcSDBVpQNz29EWI+yffpf3Suo4N04TTX0SxuXtpak2xeUE4WxyWcspn49Rerm
QX7KdqcUTyXnzRNHkVdIelqruvH6xAYVaqxjxMGmMf81L43URppf4aYrghwl3lTU
JDvwmvW8Fx8=
=MYCZ
-----END PGP SIGNATURE-----