Attack (Attack ID:319497)

Release Date2010/03/09

Attack NameEXPLOIT Apple QuickTime Movie File Clipping Region Handling heap buffer overflow -1 (CVE-2009-0954)

Severity

BUG ID

CVE ID

 

Description

Heap-based buffer overflow in Apple QuickTime before 7.6.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a movie file containing crafted Clipping Region (CRGN) atom types.
Impact:Remote code execution
Affected System:Others
Additional References:BID:35167;CVE-2009-0954

 

Solution

Update vendor's patch.