Apple has discontinued support for its proprietary QuickTime player for Windows. For QuickTime owners, Apple recommends removing it from the system, otherwise users may be compromised after 0day vulnerabilities that will never be closed. More recently, two such RCE vulnerabilities have been discovered in the player (
ZDI-16-241 ,
ZDI-16-242 ). They allow attackers to remotely execute code in the victim's system.

The exploitation of the above vulnerabilities is possible through a specially formed multimedia file, which can be posted on a website or sent via email to the victim. QuickTime Player has added to the ranks of such popular software as Oracle Java 6, as well as Windows XP, which support is also discontinued.