• info
• discussion
• exploit
• solution
• references

Apple QuickTime for Java Unspecified Remote Heap Buffer Overflow Vulnerability

Apple QuickTime for Java is prone to a remote heap-based buffer-overflow vulnerability because the application fails to properly bounds-check user-supplied input prior to copying it to an insufficiently sized buffer.

Exploiting this issue allows remote attackers to execute arbitrary machine code in the context of the affected application, facilitating the remote compromise of affected computers. Failed exploit attempts will result in a denial of service.