Changes
Updated to Quicktime 7.68
</remove>
</package>
<!-- Do not use version 7.67 which is bundled with ITunes 10.0.0.68 due to security flaws --><package id='quicktime' name='Apple QuickTime' revision='7.6768.75.0' reboot='false' priority='1'>
<check type='uninstall' condition='exists' path='QuickTime' />
<check type='file' condition='versiongreaterorequal' path='%PROGRAMFILES%\QuickTime\QuickTimePlayer.exe' value='7.6768.75.0' />
<install cmd='msiexec /i "%SOFTWARE%\itunes\QuickTime.msi" SCHEDULE_ASUW=0 /passive /norestart' timeout='300'>
</upgrade>
<remove cmd='msiexec /x {EB900AF8-CC61-4E15-871B-98D1EA3E8025FIXME} /passive /norestart' timeout='300'>
<exit code='0' />
<exit code='1605' />
=== Quicktime ===
* Open QuickTime.msi with Orca, select ''New Transform'' from the main menu.
* Edit the table ''FeatureComponents'' and drop the component ''QuickTimeEssentials.qtx''. This gets rid of the installation of the Quicktime Firefox plugin. The rationale behind this is that the Quicktime plugin is of almost no use anymore because hardly anyone except Apple embeds Quicktime media files into websites. However nowadays one of the main attack vectors and primary source of drive-by installs are security holes in webbrowser plugins (for example the most recent installer of ITunes as of August September 2010 contains a Quicktime version that is vulnerable to arbitrary remote code executionhas two known and highly critical security holes [http://secunia.com/advisories/41123/ #1] [http://secunia.com/advisories/41213/ #2]). Therefore it is strongly advisable to install as few plugins as possible.
* Drop the condition ''NOT BNEWERPRODUCTISINSTALLED'' from the ''LaunchCondition'' table. This allows you the roll out the MSI via WPKG even if the user already installed a newer version of Quicktime manually.
* Click ''Generate Transform'' and save the resulting file into the same folder as the MSI.
=== Quicktime ===
The Quicktime installer package is grouped into multiple features (categories). For reasons that are left to the imagination of the reader, Apple prevents the user from deselecting any of those features through the GUI. However by using the ''ADDLOCAL'' switch, it is possible to specify which features should be installed. To use the audio and video playback capabilites of Quicktime, only the feature ''QuickTimeEssentials'' is necessary.
The other features as of version 7.67 68 are: QuickTimeInternet, QuickTimeImage, QuickTimeEffects, QuickTimeMusic, QuickTimeAuthoring, QuickTimeCapture, QuickTimeForJava, QuickTimeDiagnostics, QuickTimeProResDecoder. None of them is necessary to run ITunes, therefore they are all excluded. Be aware that ''QuickTimeInternet'' includes the Quicktime plugin for the Internet Explorer (see above for possible security implications when installing this feature).
<source lang="xml">
<?xml version="1.0" encoding="UTF-8"?>
<package id='quicktime' name='Apple QuickTime' revision='7.6768.75.0' reboot='false' priority='1'>
<chain package-id='quicktimesettings' />
<check type='uninstall' condition='exists' path='QuickTime' />
<check type='file' condition='versiongreaterorequal' path='%PROGRAMFILES%\QuickTime\QuickTimePlayer.exe' value='7.6768.75.0' />
<!-- ADDLOCAL=QuickTimeEssentials: Only install the main feature of Quicktime -->
</upgrade>
<remove cmd='msiexec /x {EB900AF8E7004147-CC612CCA-4E15431C-871BAA05-98D1EA3E80252AB166B9785D} /passive /norestart' timeout='300'>
<exit code='0' />
<exit code='1605' />