Description
Heap-based buffer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a QTIF file with a Video Sample Description containing a Color table ID of 0, which triggers memory corruption when QuickTime assumes that a color table exists.
References
- ADV-2007-0825 vdb-entry
- VU#313225 third-party-advisory
- 20070305 Apple QuickTime Color Table ID Heap Corruption Vulnerability third-party-advisory
- 22827 vdb-entry
- 24359 third-party-advisory
- 20070306 [Reversemode Advisory] Apple Quicktime Color ID remote heap corruption mailing-list
- APPLE-SA-2007-03-05 vendor-advisory
- 1017725 vdb-entry
- TA07-065A third-party-advisory
- 22839 vdb-entry
- http://docs.info.apple.com/article.html?artnum=305149
- quicktime-qtif-file-bo(32826) vdb-entry