Apple QuickTime Error Logging Remote Buffer Overflow Vulnerability
RISK: Medium Risk
A vulnerability has been identified in Apple QuickTime, which could be exploited by attackers to compromise a vulnerable system. This issue is caused by a stack overflow error within QuickTime's error logging feature when processing a malformed movie file, which could be exploited by attackers to execute arbitrary code by tricking a user into visiting a specially crafted web page or opening a malicious movie file.
Impact
- Remote Code Execution
System / Technologies affected
- Apple QuickTime versions prior to 7.6.7 (for Windows)
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
- Upgrade to Apple QuickTime version 7.6.7:
http://www.apple.com/quicktime/download/
Vulnerability Identifier
Source
Related Link
Share with