As we reported here just over two weeks ago, Apple’s QuickTime, for both Mac OS X and Windows, had a flaw in its real-time streaming protocol (RTSP). This flaw was dangerous enough that some reports suggested that it was being using in the game Second Life to scam players. Apple today released a QuickTime update that patches this vulnerability, along with two others, one affecting QTL files, and another the way QuickTime deals with Flash media. Windows users can download this patch from the above URL, and Mac users can get it via the Software Update preference pane in System Preferences. This is an essential update, so do it immediately.
