Description
Apple QuickTime before 7.4 allows remote attackers to execute arbitrary code via a movie file containing a Macintosh Resource record with a modified length value in the resource header, which triggers heap corruption.
References
- 28502 third-party-advisory
- http://docs.info.apple.com/article.html?artnum=307301
- quicktime-macintosh-code-execution(39696) vdb-entry
- TA08-016A third-party-advisory
- APPLE-SA-2008-01-15 vendor-advisory
- 27301 vdb-entry
- ADV-2008-0148 vdb-entry
- 20080115 Apple QuickTime Macintosh Resource Processing Heap Corruption Vulnerability third-party-advisory
- 1019221 vdb-entry