Apple has released a patch for Quicktime but it is reportedly only available at the myspace site.
http://blog.washingtonpost.com/securityfix/2006/12/how_not_to_distribute_security_1.html