Attack (Attack ID:319500)

Release Date2010/03/09

Attack NameFILE Apple QuickTime PICT Image Processing Uncompressedfile Stack overflow -1 (CVE-2007-4672)

Severity

BUG ID

CVE ID

 

Description

Stack-based buffer overflow in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via an invalid UncompressedQuickTimeData opcode length in a PICT image.
Impact:Remote code execution
Affected System:Others
Additional References:BID:26344;CVE-2007-4672

 

Solution

Update vendor's patch.