Bug in QuickTime 5 ActiveX control

My two extracurricular Network World activities (this blog and our Security and Bug Patch Alert newsletter) converge with this one:

The security group @Stake has discovered a flaw in the way the QuickTime 5 ActiveX control, for viewing QuickTime media embedded in a Web page, handles the plugins page parameter. A buffer overflow in the parser could be exploited to allow a malicious user to execute arbitrary code on the affected Windows machine. What should you do? For those that want the technical details, see the @Stake advisory. For those that want to fix their machine, upgrade to QuickTime 6.