Multiple vulnerabilities have been reported in Apple QuickTime, which can be exploited by malicious people to compromise a user's system.

1) Errors in the processing of H.264 movies can be exploited to trigger an integer overflow or buffer overflow.

2) A boundary error within the processing of QuickTime movies can be exploited to cause a buffer overflow.

3) A boundary error within the processing of FLC movies can be exploited to cause a heap-based buffer overflow via a FLC movie with a specially crafted COLOR_64 chunk.

4) Errors within the processing of FlashPix files can be exploited to cause an integer overflow or buffer overflow.

5) An error within the processing of FlashPix files can be exploited to trigger an exception leaving an uninitialised object.

6) A boundary error within the processing of SGI images can be exploited to cause a buffer overflow.

7) An error within the processing of Quicktime movies can be exploited to cause a heap-based buffer overflow via a Quicktime movie with a specially crafted STSD atom.

Successful exploitation of the vulnerabilities may allow execution of arbitrary code.

Solution
Update to version 7.1.3.
Further details available to Secunia VIM customers

Provided and/or discovered by
The vendor credits:
1) Sowhat of Nevis Labs, Mike Price of McAfee AVERT Labs, and Piotr Bania.
2) Mike Price of McAfee AVERT Labs.
3) Mike Price of McAfee AVERT Labs and Ruben Santamarta.
4) Mike Price of McAfee AVERT Labs.
5) Mike Price of McAfee AVERT Labs.
6) Mike Price of McAfee AVERT Labs
7) Ganesh Devarajan, TippingPoint DVLabs.

Changelog
Further details available to Secunia VIM customers

Original Advisory
Apple:
http://docs.info.apple.com/article.html?artnum=304357

iDEFENSE:
http://www.idefense.com/intelligence/vulnerabilities/display.php?id=413

Reverse Mode:
http://www.reversemode.com/index.php?option=com_remository&Itemid=2&func=fileinfo&id=25

Piotr Bania:
http://pb.specialised.info/all/adv/quicktime-integer-overflow-h264-adv-7.1.txt

TippingPoint DVLabs:
http://dvlabs.tippingpoint.com/advisory/TPTI-07-07

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers