US-CERT Technical Cyber Security Alert TA09-022A -- Apple QuickTime Updates for Multiple Vulnerabilities

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

National Cyber Alert System

Technical Cyber Security Alert TA09-022A

Apple QuickTime Updates for Multiple Vulnerabilities

Original release date: January 22, 2009
Last revised: --
Source: US-CERT

Systems Affected

* Apple QuickTime 7.5 for Windows and Mac OS X

Overview

Apple has released QuickTime 7.6 to correct multiple
vulnerabilities affecting QuickTime for Mac OS X and Windows.
Attackers may be able to exploit these vulnerabilities to execute
arbitrary code or cause a denial of service.

I. Description

Apple QuickTime 7.6 addresses a number of vulnerabilities affecting
QuickTime. An attacker could exploit these vulnerabilities by
convincing a user to access a specially crafted media or movie
file. This file could be hosted on a web page or sent via email.

II. Impact

The impacts of these vulnerabilities vary. Potential consequences
include arbitrary code execution and denial of service.

III. Solution

Upgrade to QuickTime 7.6. This and other updates are available via
Software Update or via Apple Downloads.

IV. References

* About the security content of QuickTime 7.6 -
<http://support.apple.com/kb/HT3403>

* Apple Support Downloads - <http://support.apple.com/downloads/>

* Mac OS X - updating your software -
<http://support.apple.com/kb/HT1338?viewlocale=en_US>

* Securing Your Web Browser -
<https://www.us-cert.gov/reading_room/securing_browser/>

____________________________________________________________________

The most recent version of this document can be found at:

<http://www.us-cert.gov/cas/techalerts/TA09-022A.html>
____________________________________________________________________

Feedback can be directed to US-CERT Technical Staff. Please send
email to <cert@cert.org> with "TA09-022A Feedback VU#703068" in
the subject.
____________________________________________________________________

For instructions on subscribing to or unsubscribing from this
mailing list, visit <http://www.us-cert.gov/cas/signup.html>.
____________________________________________________________________

Produced 2009 by US-CERT, a government organization.

Terms of use:

<http://www.us-cert.gov/legal.html>
____________________________________________________________________

Revision History

January 22, 2009: Initial release

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.5 (GNU/Linux)

iQEVAwUBSXj25HIHljM+H4irAQKNIgf+LSBKBzHWdjxmJgYw3vYmAXtwpUxAVThs
Ma4vIB1vSjv8Us83S2XrKIGcKrdPgQgeS7Vji9WRMmlzEv/AYlFJseqq17ufGely
5YosATUh+C0SjY6OAYeJNYMws7fgGcGJagtfQp0gJTRLruknEoB/iqlASBQ7MtNg
7viHKIR8r2BxCNB1A4ir1kzPELIHFF/pmmuaD+E2PnxH1XtYLM9b9t6xbkjie2PG
vEwv7JCGH/RrJtst480ZMIHOghsZ0ONoMkTjZB7o5S0ww3guktGOMB+/QiZI8eFB
KbU6nB6JGscZ8Fb1E4K3yOU9MvpzEfurIvYmyMcAdxFCiq5CSUjOug==
=B5D3
-----END PGP SIGNATURE-----

California Fire News - Updates in your mail box

Earthquake 3.5 M - Tres Pinos, Chualar, Hollister, CA Posted: 21 Jan 2009 06:10 PM PST Earthquake Shake Map Earthquake Details Magnitude 3.5 Date-Time Wednesday, January 21, 2009 at 20:49:42 UTC Wednesday, January 21, 2009 at 12:49:42 PM at epicenter Time of Earthquake in other Time Zones Location 36.698°N, 121.331°W Depth 6.5 km (4.0 miles) Region CENTRAL CALIFORNIA Distances 10 km (6 miles) S (185°) from Tres Pinos, CA 18 km (11 miles) SSE (160°) from Hollister, CA 22 km (14 miles) NE (49°) from Chualar, CA 87 km (54 miles) SE (145°) from San Jose City Hall, CA Location Uncertainty horizontal +/- 0.1 km (0.1 miles); depth +/- 0.4 km (0.2 miles) Parameters NST=186, Nph=186, Dmin=7 km, Rmss=0.07 sec, Gp= 32°, M-type=regional moment magnitude (Mw), Version=4 Source California Integrated Seismic Net: USGS Caltech CGS UCB UCSD UNR Event ID nc51215680

State News: State Controller will refuse to reduce state worker pay Posted: 21 Jan 2009 05:40 PM PST Democratic State Controller John Chiang announced Wednesday he will refuse to reduce state worker pay as demanded by Gov. Arnold Schwarzenegger, hopefully averting furloughs and pay cuts for 238,000 public employees. Schwarzenegger signed an executive order in December requiring that state workers take two unpaid days off each month through June 2010, equivalent to nearly a 10 percent pay cut. The governor's plan would shut down most state offices on the first and third Friday of each month starting Feb. 6 2009 The governor's Department of Finance has estimated the plan would save $1.3 billion over 17 months. The State Controller John Chiang filed court documents Tuesday afternoon in Sacramento Superior Court arguing that the governor's plan is illegal. His filing is a response to a lawsuit filed by state engineers and scientists to stop Schwarzenegger's order. The state controller argues this time in his legal brief that state law explicitly prevents the governor from unilaterally furloughing state employees. Schwarzenegger aides said in December that they believe they have unique authority to do so because the governor declared a state of fiscal emergency. Bottom line: Governors budget cutting would have no net effect on a estimated 40 billion dollar deficit, and if the State was to layoff every single employee for two years saving approximately 36 billion dollars the state would still be losing money. Labor response: labor unions immediately applauded Chiang for his announcement. "Once again John Chiang has come through for state workers and the people of California by obeying state law instead of playing political games," said Jim Zamora, spokesman for Service Employees International Union Local 1000, which represents 95,000 state workers. "We have long maintained it is illegal for the governor to unilaterally enact mandatory furloughs. SEIU Local 1000 will continue to discuss furloughs as well as our own cost saving proposals with the governor's negotiators at the bargaining table."

CAL FIRE - RRU: Passing of retired Battalion Chief Bob Green Posted: 21 Jan 2009 12:36 PM PST It is with a heavy heart that I must report the passing of retired Battalion Chief Bob Green. Bob passed away early this morning in his home State of Washington. Bob worked many years with the City of Indio Fire Department. Bob became part of the CAL FIRE/Riverside County Fire Department family in 1997 when Indio became part of our cooperative fire protection program. Bob retired just a few short years ago as a Battalion Chief in the Cove Communities Battalion 12. A Unit liaison will be assigned and will forward information on his pending funeral service. Please keep the Green family in your thoughts during this difficult time.

LPF: Prescribed burns - 2,300 acres Posted: 21 Jan 2009 02:39 PM PST Los Padres National Forest prescribed burn perimeter map UPDATE: Towering plumes of smoke seen throughout much of the North County Tuesday were from a prescribed burn in Los Padres National Forest. The U.S. Forest Service torched some 2,300 acres along Pine Canyon Road near Horseshoe Spring Campground, east of Santa Maria, according to the Forest Service. Officials said they plan to burn a total of 5,835 acres in the area in an effort to reduce hazardous fuels, prepare for future wildfires and protect the natural watershed. The burn had been scheduled for the week of Jan. 12, but unfavorable weather conditions caused a postponement. With the possibility of rain forecast for today, there will be no burning scheduled. It is unknown when the remaining acreage will be burned because it will depend on the wind, temperature, relative humidity and fuel-moisture levels, said Helen Tarbet, a Forest Service fire information officer. The burn area is about 15 miles east of Santa Maria, south of Highway 166 and east of Tepusquet Road. For current information on restricted roads during the prescribed burn, call the Santa Lucia Ranger Station at 925-9538. --------------------------- U.S. Forest Service News Releases: 2009 News Release US Forest Service Los Padres National Forest Contact: Joe Pasinato (805) 961-5745 Jill Evans (805) 925-9538 Date: January 7, 2009 Prescribed Burn Scheduled in Los Padres National Forest The U.S. Forest Service will conduct a prescribed burn (weather permitting) on approximately 5,835 acres along Pine Canyon Road near Horseshoe Spring Campground, in Los Padres National Forest. The burn is scheduled to begin on Monday, January 12, and continue through the week. Smoke will be visible from the Santa Maria/Orcutt area. The project area is approximately 15 miles east of Santa Maria along Pine Canyon Road south of Highway 166 and east of Tepusquet Road. The purpose of the burn is to reduce hazardous fuels, lessen impacts of a future wildfire in the area, improve wildlife habitat and enhance and protect the Lower Cuyama River watershed. Travel on Pine Canyon, Miranda Pine and La Brea Canyon Roads may be restricted periodically during the burn. Residual smoke may be visible in the area for up to two weeks. Forest visitors are advised to call the Santa Lucia Ranger Station at (805)925-9538 to obtain current information during the burn. Source: LPF R-5 -Prescribed Burn Schedule Link

CAL FIRE RRU: Passing of retired Fire Captain Specialist Tom Ramsey Posted: 21 Jan 2009 01:22 PM PST Retired Fire Captain Specialist Tom Ramsey May God Bless his family during this sad and difficult period of their lives. Retired Fire Captain Specialist Tom Ramsey passed away this morning January 20th. Tom was a long time employee within the Riverside Unit, working in Coachella Valley, Beaumont, Emergency Command Center, Fire Prevention, and retiring as a Fire Captain Specialist in Fire Protection Planning. Before starting with CDF/CAL FIRE, Tom was a very active member of the Sunnymead Volunteer Fire Company in Moreno Valley. Battalion Chief Tom Hyatt has been assigned as the liaison for the Ramsey family. Please keep the Ramsey family in you thoughts during this difficult time.

You are subscribed to email updates from California Fire News - Structure, Wildland, EMS To stop receiving these emails, you may unsubscribe now.	Email delivery powered by Google
Inbox too full? Subscribe to the feed version of California Fire News - Structure, Wildland, EMS in a feed reader.
If you prefer to unsubscribe via postal mail, write to: California Fire News - Structure, Wildland, EMS, c/o Google, 20 W Kinzie, Chicago IL USA 60610