Apple QuickTime Flash Media Player Multiple Unspecified Vulnerabilities

Apple QuickTime Flash Media Player Multiple Unspecified Vulnerabilities

Apple QuickTime is prone to multiple unspecified vulnerabilities. The most serious issue will allow remote attackers to execute code.

The remote-code execution issues involve processing '.swf' files. The 'Quicktime.qts' module uses the 'BitMapFormat' attribute of the 'Parser' object without validating its contents.

An attacker can exploit some of these issues to execute arbitrary code with the privileges of the user running the affected application. The impact of the other issues has not been specified.

These issues affect versions prior to QuickTime 7.3.1 for these platforms:

Mac OS X v10.3.9
Mac OS X v10.4.9 or later
Mac OS X v10.5 or later
Microsoft Windows Vista
Microsoft Windows XP SP2