Skip to main content

Apple QuickTime Error Logging Remote Buffer Overflow Vulnerability

Last Update Date: 28 Jan 2011 Release Date: 16 Aug 2010 5375 Views

RISK: Medium Risk

A vulnerability has been identified in Apple QuickTime, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a stack overflow error within QuickTime's error logging feature when processing a malformed movie file, which could be exploited by attackers to execute arbitrary code by tricking a user into visiting a specially crafted web page or opening a malicious movie file.


Impact

  • Remote Code Execution

System / Technologies affected

  • Apple QuickTime versions prior to 7.6.7 (for Windows)

Solutions

Before installation of the software, please visit the software manufacturer web-site for more details.


Vulnerability Identifier


Source


Related Link