Apple QuickTime information disclosure vulnerability-vulnerability warning-the black bar safety net

Release date: 2011-10-28

Update date: 2011-10-28

Affected system:

Apple QuickTime Player 7. x

Not affected system:

Apple QuickTime Player 7.7.1

Description:

--------------------------------------------------------------------------------

BUGTRAQ ID: 5 0 1 3 0

CVE ID: CVE-2 0 1 1-3 2 2 0

QuickTime is by Apple Computer, the development of a multimedia architecture that can handle many of the digital video, media passages, sound effects, text, animation, music format, as well as interactive panoramic images of several types.

Apple QuickTime in processing the video file URL in the data processing program when the presence of the uninitialized memory access problem, an attacker can exploit this vulnerability to read the memory content.

<*source: Luigi Auriemma （[email protected]）

Links: http://support.apple.com/kb/HT5016

*>

Recommendations:

--------------------------------------------------------------------------------

Manufacturers patch:

Apple

-----

The current vendors have released an upgrade patch to fix this security issue, please go to the manufacturers home page download:

http://support.apple.com/