iDefense Security Advisory 03.05.07: Apple QuickTime Color Table ID Heap Corruption Vulnerability

Apple QuickTime Color Table ID Heap Corruption Vulnerability iDefense Security Advisory 03.05.07 http://labs.idefense.com/intelligence/vulnerabilities/ Mar 05, 2007 I. BACKGROUND Quicktime is Apple's media player product used to render video and other media. For more information visit...

QuickTime < 7.1.5 Multiple Vulnerabilities (Windows)

According to its version, the installation of QuickTime on the remote Windows host is affected by multiple buffer overflows. An attacker may be able to leverage these issues to crash the affected application or to execute arbitrary code on the remote host by sending a specially crafted file to a...

CVE-2007-0718

CVE-2007-0718 describes a heap-based buffer overflow in Apple QuickTime prior to 7.1.5 when processing QTIF files. If a Video Sample Description contains a Color table ID of 0, QuickTime expects a color table post-description and performs a memory swap on memory that may not be part of the heap b...