Description
Unspecified vulnerability in Apple QuickTime before 7.4 allows remote attackers to cause a denial of service (application termination) and execute arbitrary code via a movie file with Image Descriptor (IDSC) atoms containing an invalid atom size, which triggers memory corruption.
References
- 20080115 TPTI-08-01: Apple Quicktime Image File IDSC Atom Memory Corruption Vulnerability mailing-list
- 28502 third-party-advisory
- http://dvlabs.tippingpoint.com/advisory/TPTI-08-01
- http://docs.info.apple.com/article.html?artnum=307301
- TA08-016A third-party-advisory
- APPLE-SA-2008-01-15 vendor-advisory
- ADV-2008-0148 vdb-entry
- 27299 vdb-entry
- 1019221 vdb-entry
- quicktime-idsc-code-execution(39697) vdb-entry