Apple QuickTime 7.7.2 EARLIER '. pict' File Memory Corruption Vulnerability

Release date:
Updated on:

Affected Systems:
Apple QuickTime Player 7.x
Unaffected system:
Apple QuickTime Player 7.7.2
Description:
--------------------------------------------------------------------------------
Bugtraq id: 53584
Cve id: CVE-2012-0671

QuickTime is a multimedia architecture developed by Apple Computer. It can process many digital videos, media paragraphs, sound effects, text, animations, music formats, and interactive panoramic images.

A security vulnerability exists in Apple QuickTime versions earlier than 7.7.2 when processing specially crafted. pict files. This vulnerability allows remote attackers to execute arbitrary code or cause DOS.

<* Source: Rodrigo Rubira Branco (rodrigo@risesecurity.org)

Link: http://secunia.com/advisories/47447/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Apple
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://support.apple.com/