Description
Stack-based buffer overflow in Indeo.qtx in Apple QuickTime before 7.5 allows remote attackers to cause a denial of service (crash) or execute arbitrary code via crafted Indeo video codec content in a movie file.
References
- 20080610 ZDI-08-037: Apple QuickTime Indeo Video Buffer Overflow Vulnerability mailing-list
- TA08-162C third-party-advisory
- 1020216 vdb-entry
- quicktime-indeo-video-bo(42947) vdb-entry
- APPLE-SA-2008-06-09 vendor-advisory
- 29293 third-party-advisory
- 29652 vdb-entry
- ADV-2008-1776 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-08-037/
- 29619 vdb-entry
- http://support.apple.com/kb/HT1991