Unscored CVE-2011-0252 EUVD-2011-0278GHSA-qwph-hq32-p8hw

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (ap…

Published Aug 4, 2011 · Updated Aug 6, 2024 · Assigned by apple

Description

Heap-based buffer overflow in Apple QuickTime before 7.7 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted STTS atoms in a QuickTime movie file.

References

APPLE-SA-2011-08-03-1 vendor-advisory
APPLE-SA-2011-10-12-3 vendor-advisory
oval:org.mitre.oval:def:15884 vdb-entry signature
http://support.apple.com/kb/HT5002