Attack (Attack ID:711165)

Release Date2010/03/09

Attack NameFILE Apple QuickTime STSD Atoms Handling Heap Overflow (CVE-2007-3750)

Severity

BUG ID

CVE ID

 

Description

There exists a buffer overflow vulnerability in Apple QuickTime. The flaw is due to boundary errors when processing the Sample Table Sample Descriptor (STSD) atom in QuickTime movie files.
Impact:Remote code execution
Affected System:Windows, Mac OS
Additional References:BID-26341; CVE-2007-3750

 

Solution

Update vendor's patch.