After releasing Security Update 2013-003 for OS X yesterday, Apple just today published the reasons for these security updates, and details the patched bugs.
Security Update 2013-003 is available for OS X 10.6 (Snow Leopard), OS X 10.7 (Lion), and OS X 10.8 (Mountain Lion) and addresses only three issues, which appear in the QuickTime.
According to the KB article, the operating system versions targeted by the updates are: Mac OS X 10.6.8, Mac OS X Server 10.6.8, OS X Lion v10.7.5, OS X Lion Server v10.7.5, and OS X Mountain Lion v10.8.4.
The bugs in the QuickTime application could be exploited by either playing or viewing a malicious video file and led to “an unexpected application termination or arbitrary code execution.”
The main cause of all three bugs was a “buffer overflow” in the handling of H.264, Sorenson, and mvhd encoded videos.
