[skyhawk133]

"By enticing a user to visit a web page containing a maliciously crafted Java applet, an attacker can trigger the issue which may lead to arbitrary code execution"

Apple has plugged two holes in its QuickTime media player that could create serious security problems for people tricked into visiting malicious websites. via The Register