Unscored CVE-2004-0431 EUVD-2004-0430GHSA-g7hr-jcr3-qr24

Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries"…

Published May 6, 2004 · Updated Aug 8, 2024 · Assigned by mitre

Description

Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow.

References

APPLE-SA-2004-04-30 vendor-advisory
20040502 EEYE: Apple QuickTime (QuickTime.qts) Heap Overflow mailing-list
quicktime-heap-bo(16026) vdb-entry
VU#782958 third-party-advisory
20040502 EEYE: Apple QuickTime (QuickTime.qts) Heap Overflow mailing-list