Description
Heap-based buffer overflow in Apple QuickTime before 7.5 on Windows allows remote attackers to cause a denial of service (crash) and possibly execute arbitrary code via crafted packed scanlines in PixData structures in a PICT image.
References
- 20080610 Secunia Research: Apple QuickTime PICT Image Parsing Buffer Overflow mailing-list
- TA08-162C third-party-advisory
- quicktime-pixdata-bo(42943) vdb-entry
- 1020213 vdb-entry
- APPLE-SA-2008-06-09 vendor-advisory
- 29293 third-party-advisory
- ADV-2008-1776 vdb-entry
- http://secunia.com/secunia_research/2008-9/advisory/
- 29619 vdb-entry
- 29649 vdb-entry
- http://support.apple.com/kb/HT1991