Description
Heap-based buffer overflow in Apple QuickTime before 7.1 allows remote attackers to execute arbitrary code via a crafted BMP file that triggers the overflow in the ReadBMP function. NOTE: this issue was originally included as item 3 in CVE-2006-1983, but it has been given a separate identifier because it is a distinct issue.
References
- 20069 third-party-advisory
- 24820 vdb-entry
- APPLE-SA-2006-05-11 vendor-advisory
- 1016067 vdb-entry
- quicktime-bmp-bo(26402) vdb-entry
- TA06-132B third-party-advisory
- http://www.security-protocols.com/sp-x27-advisory.php
- 17953 vdb-entry
- ADV-2006-1778 vdb-entry