Apple QuickTime MOV File Heap Overflow Vulnerability

Apple QuickTime MOV File Heap Overflow Vulnerability

Apple QuickTime is prone to a heap buffer-overflow issue because it fails to properly check boundaries on user-supplied data.

Successfully exploiting this issue allows remote attackers to execute arbitrary code in the context of the user running the application. Failed exploit attempts likely result in denial-of-service conditions.

QuickTime 7.1 is vulnerable; other versions may also be affected.

This issue was previously discussed in BID 22827 (Apple QuickTime Multiple Unspecified Code Execution Vulnerabilities), but has been assigned its own record because of new information.