Apple QuickTime Sorenson Video 3 Array-Indexing Vulnerability
Last Update Date:
28 Jan 2011
Release Date:
12 Nov 2010
4715
Views
RISK: Medium Risk
A vulnerability have been identified in Apple QuickTime, could be exploited by remote attackers to compromise an affected system. An array-indexing error when parsing Sorenson Video 3 content and can be exploited to corrupt memory during decompression via a specially crafted file.
Impact
- Remote Code Execution
System / Technologies affected
- Apple QuickTime 7.x
Solutions
Before installation of the software, please visit the software manufacturer web-site for more details.
This will be addressed in an upcoming version for Windows. A fix is available for Mac OS X.
http://support.apple.com/kb/HT4435
Vulnerability Identifier
Source
Related Link
Share with