Apple has released security update 2006-008

In the notes released with the update, Apple states that “Java applets can use QuickTime for Java for rendering the images on screen using QuickTime embedded objects and for uploading them to the original website. When using this feature together Quartz Composer allows you to capture images that may contain local information. “

“This update addresses the issue by disabling Quartz Composer compositions in unsigned Java applets. Quartz Composer compositions continue to work locally. Signed Java applets and applications using QuickTime and QuickTime for Java are not affected by this measure. This issue does not affect systems prior to Mac OS X 10.4. It does not affect the Windows platform either. “