Apple Quicktime 7.7.5 Multiple Vulnerabilities

Versions older than Quicktime 7.7.5 contain the following vulnerabilities:

• Multiple buffer overflow vulnerabilities, which can be leveraged by an attacker to execute arbitrary code or application termination (2014-1246, CVE-2014-1248, CVE-2014-1249)

• An out-of-bounds byte swapping issue in the handling of ‘ttfo’ elements, which can be leveraged by an attacker to execute arbitrary code or application termination (CVE-2014-1250)

• A signedness issue in the handling of ‘stsz’ atoms, which can be leveraged by an attacker to execute arbitrary code or application termination (CVE-2014-1245)

• A memory corruption issue when handling the ‘dref’ atoms, which can be leveraged by an attacker to execute arbitrary code or application termination (CVE-2014-1247)