Description
Apple QuickTime before 7.7 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted image description associated with an mp4v tag in a movie file.
References
- http://support.apple.com/kb/HT4826
- 8368 third-party-advisory
- 20110831 ZDI-11-277: Apple QuickTime 3g2 'mp4v' atom size Remote Code Execution Vulnerability mailing-list
- http://zerodayinitiative.com/advisories/ZDI-11-277/
- oval:org.mitre.oval:def:15671 vdb-entry signature
- quicktime-mp4v-bo(69518) vdb-entry