CVE-2015-7092: Improper Restriction of Operations within the Bounds of a Memory Buffer

Apple QuickTime before 7.7.9 allows remote attackers to execute arbitrary code or cause a denial of service heap-based buffer overflow and application crash via a crafted TXXX frame within an ID3 tag in MP3 data in a movie file, a different vulnerability than CVE-2015-7085, CVE-2015-7086,...

Apple QuickTime ID3 Tag Heap Buffer Overflow Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of I...