File Path Processing Stack Overflow Vulnerability in versions earlier than Apple QuickTime 7.7.2

Release date:
Updated on:

Affected Systems:
Apple QuickTime Player 7.x
Unaffected system:
Apple QuickTime Player 7.7.2
Description:
--------------------------------------------------------------------------------
Bugtraq id: 53578
Cve id: CVE-2012-0265

QuickTime is a multimedia architecture developed by Apple Computer. It can process many digital videos, media paragraphs, sound effects, text, animations, music formats, and interactive panoramic images.

The stack buffer overflow security vulnerability exists in the specially crafted path for processing files in versions earlier than Apple QuickTime 7.7.2. This vulnerability allows remote attackers to execute arbitrary code or cause DOS.

<* Source: Tielei Wang (wangtielei@icst.pku.edu.cn)

Link: http://secunia.com/advisories/47447/
*>

Suggestion:
--------------------------------------------------------------------------------
Vendor patch:

Apple
-----
The vendor has released a patch to fix this security problem. Please download it from the vendor's homepage:

Http://support.apple.com/