Apple has just released QuickTime 7.4 which fixes several security vulnerabilities:

• CVE-2008-0031: A maliciously crafted Sorensen 3 movie file may lead to arbitrary code execution;
• CVE-2008-0032: A maliciously crafted movie file may lead to arbitrary code execution during the handling of Macintosh resource records;
• CVE-2008-0033: A maliciously crafted movie file may lead to arbitrary code execution during parsing of Image Descriptor atoms;
• CVE-2008-0036: A maliciously crafted PICT image may lead to arbitrary code execution;

Note that this update does not yet appear to resolve the critical vulnerability reported last week by Luigi Auriemma (VU #112179).