Apple has issued an update for the Mac and Windows versions of QuickTime.
The update addresses 11 vulnerabilities in the multimedia player software, nine of which could be exploited by an attacker to remotely execute code on a target system.
All the flaws affect Windows XP and Vista systems. Eight of the vulnerabilities also affect the Mac OS X version of QuickTime.
Five remote code execution flaws could be exploited by way of specially-crafted movie files.
Such files could also be used to execute another flaw which allows for the launching of external URLs, which Apple said could allow for information disclosure.
Three of the flaws could be exploited by way of Pict files and used by an attacker for remote code execution.
The remaining two flaws include a remote code execution flaw in the handling of QuickTime VR files and a flaw which could allow Java applets to obtain elevated privileges.
The QuickTime update can be obtained via Apple's Software Update utility or at the Apple Downloads site.
Cotton seedling freezes to death as Chang'e-4 shuts down for the Moon's 14-day lunar night
Fortnite easily out-earns PUBG, Assassin's Creed Odyssey and Red Dead Redemption 2 in 2018
Meteor showers as a service will be visible for about 100 kilometres in all directions
Saturn's rings only formed in the past 100 million years, suggests analysis of Cassini space probe data
New findings contradict conventional belief that Saturn's rings were formed along with the planet about 4.5 billion years ago