Apple has released an updated version of its popular QuickTime media playback software that fixes eight security vulnerabilities.

QuickTime 7.1.5, which also contains a number of bug fixes, guards against exploits that might be as straightforward as tricking users into opening maliciously constructed media files. The flaws affect both Windows and Mac OS X versions of QuickTime. Successful exploitation would allow hackers to take control of vulnerable systems.

Normally, Apple does a good job at automatically updating its QuickTime software - providing users have selected its auto-update function - but the SANS Institute reports that the updater tool that shipped with older versions of QuickTime doesn't apply to this particular patch, which security watchers rate as critical. Users are advised to install the update manually.

The vulnerabilities were variously discovered by security staff at McAfee's Avert Labs, iDefense and independent researchers. More detail on the flaws can be found in Apple's security advisory here. ®

Related stories

Apple patches Windows QuickTime bug (4 October 2007)
Apple TV gets its first critical security patch (20 June 2007)
Apple patches more than a dozen holes in OS X (25 May 2007)
Safari zero-day exploit nets $10,000 prize (20 April 2007)
Apple megapatch fixes multiple flaws (14 March 2007)
Apple updates iTunes for AppleTV but not Vista (6 March 2007)
Maynor reveals missing Apple flaw (2 March 2007)
Apple patches QuickTime bug (24 January 2007)
Month of Apple Bugs scheme yields first fixes (5 January 2007)
Unpatched bug bites QuickTime (3 January 2007)
Hackers debut Mac OS X adware (24 November 2006)
Apple bitten by iTunes security bugs (11 January 2006)
Firefox and Mac security sanctuaries 'under attack' (19 September 2005)
Symantec false alert floors Macs (10 May 2005)