Description
CoreMedia Playback in Apple Mac OS X before 10.8.4 does not properly initialize memory during the processing of text tracks, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.
References
- APPLE-SA-2013-10-22-8 vendor-advisory
- http://support.apple.com/kb/HT6001
- http://support.apple.com/kb/HT5784
- APPLE-SA-2013-06-04-1 vendor-advisory