Unscored CVE-2011-0251 EUVD-2011-0277GHSA-fr4x-87m5-wj5g

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (ap…

Published Aug 4, 2011 · Updated Aug 6, 2024 · Assigned by apple

Description

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STSZ atoms in a QuickTime movie file.

References

oval:org.mitre.oval:def:16143 vdb-entry signature
APPLE-SA-2011-08-03-1 vendor-advisory
APPLE-SA-2011-10-12-3 vendor-advisory
http://support.apple.com/kb/HT5002