[IncPen]

Not surprisingly, his link describes something other than adware and spyware.

It describes how a 'carefully crafted H.264, FLC movie, FlashPix file or SGI image can trigger a buffer overflow which may lead to an application crash or arbitrary code execution with the privileges of the user.'

Not surprisingly, the error referenced affects both Mac and PCs, and a security patch is available.

In the grand scheme of things, I reckon this makes it something like (I'll be generous) 10 billion PC security holes to one on the Mac. Which no longer exists.

Bravo!

Yawn.

Now, about that Adware and Spyware?

[Swordmaker]

Not surprisingly, the error referenced affects both Mac and PCs, and a security patch is available.

Re: the "Buffer overflow ... or arbitrary code execution with the privileges of the user."

Actually, not on a Mac... executables cannot be run in the data buffer which is where a badly crafted Quicktime movie would be placed. A buffer overflow would, at worst, crash Quicktime.

AND as you pointed out, the solution is easy:

Solution:
Update to version 7.1.3.
http://www.apple.com/quicktime/download

[ReignOfError]

Not surprisingly, the error referenced affects both Mac and PCs, and a security patch is available.

My read is that it affects neither Macs nor PCs -- just corrupts MySpace profiles. It won't infect my machine, and unless I'm dumb enough to follow a phishing link and give them personal info, no harm to me. Or did I miss something?