• info
• discussion
• exploit
• solution
• references

Apple QuickTime Clipping Region (CRGN) Atom Types Stack Exhaustion Vulnerability

Apple QuickTime is prone to a denial-of-service vulnerability.

A remote attacker can exploit this issue by enticing an unsuspecting user to open a specially crafted file.

Successful exploits will allow the attacker to cause denial-of-service conditions. Arbitrary code execution is not thought possible.

QuickTime 7.6.2 is vulnerable; other versions may also be affected.