Description
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via malformed elements when parsing (1) Poly type (0x0070 through 0x0074) and (2) PackBitsRgn field (0x0099) opcodes in a PICT image.
References
- http://www.zerodayinitiative.com/advisories/ZDI-07-066.html
- TA07-310A third-party-advisory
- http://docs.info.apple.com/article.html?artnum=306896
- quicktime-packbitsrgn-bo(38280) vdb-entry
- 3351 third-party-advisory
- 38546 vdb-entry
- APPLE-SA-2007-11-05 vendor-advisory
- 27523 third-party-advisory
- VU#690515 third-party-advisory
- 20071105 ZDI-07-066: Apple Quicktime PICT File PackBitsRgn Parsing Heap Corruption Vulnerability mailing-list
- 20071105 ZDI-07-067: Apple QuickTime PICT File Poly Opcodes Heap Corruption Vulnerability mailing-list
- 1018894 vdb-entry
- ADV-2007-3723 vdb-entry
- quicktime-poly-type-bo(38281) vdb-entry
- 26345 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-067.html