Description
Heap-based buffer overflow in QuickTime.qts in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PICT image with a BkPixPat opcode (0x12) containing crafted values that are used in a calculation for memory allocation.
References
- oval:org.mitre.oval:def:6780 vdb-entry signature
- 20100406 ZDI-10-067: Apple QuickTime Pict BkPixPat Remote Code Execution Vulnerability mailing-list
- http://www.zerodayinitiative.com/advisories/ZDI-10-067
- APPLE-SA-2010-03-30-1 vendor-advisory