Apple QuickTime Remote Memory Corruption Vulnerability (CVE-2015-3669)

Apple QuickTime Remote Memory Corruption Vulnerability (CVE-2015-3669)
Apple QuickTime Remote Memory Corruption Vulnerability (CVE-2015-3669)

Release date:
Updated on:

Affected Systems:

Apple Quicktime <7.7.7

Description:

Bugtraq id: 75497
CVE (CAN) ID: CVE-2015-3669

QuickTime is a multimedia architecture developed by Apple Computer. It can process many digital videos, media paragraphs, sound effects, text, animations, music formats, and interactive panoramic images.

In versions earlier than QuickTime 7.7.7 (Windows 7 and Vista), the QT Media Foundation has the remote memory corruption vulnerability. Remote attackers construct files by using the vulnerability, attackers can exploit this vulnerability to execute arbitrary code or cause DoS (Memory Corruption ).

<* Source: kdot
*>

Suggestion:

Vendor patch:

Apple
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://lists.apple.com/archives/security-announce/2015/Jun/msg00005.html
Http://support.apple.com/kb/HT204947

This article permanently updates the link address: