Description
Heap-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid color table size when parsing the color table atom (CTAB) in a movie file, related to the CTAB RGB values.
References
- TA07-310A third-party-advisory
- http://docs.info.apple.com/article.html?artnum=306896
- http://www.zerodayinitiative.com/advisories/ZDI-07-065.html
- 26338 vdb-entry
- VU#445083 third-party-advisory
- APPLE-SA-2007-11-05 vendor-advisory
- 27523 third-party-advisory
- 38544 vdb-entry
- quicktime-colortable-atom-bo(38283) vdb-entry
- 20071105 ZDI-07-065: Apple QuickTime Color Table RGB Parsing Heap Corruption Vulnerability mailing-list
- 1018894 vdb-entry
- ADV-2007-3723 vdb-entry
- 3352 third-party-advisory