ZDI-11-251: Apple QuickTime STSS atom Parsing Remote Code Execution Vulnerability

0
94

Posted by ZDI Disclosures on Aug 09

ZDI-11-251: Apple QuickTime STSS atom Parsing Remote Code Execution Vulnerability

http://www.zerodayinitiative.com/advisories/ZDI-11-251

August 9, 2011

— CVE ID:
CVE-2011-0250

— CVSS:
9, (AV:N/AC:L/Au:N/C:P/I:P/A:C)

— Affected Vendors:
Apple

— Affected Products:
Apple Quicktime

— TippingPoint(TM) IPS Customer Protection:
TippingPoint IPS customers have been protected against this
vulnerability by Digital Vaccine protection filter ID…

Source: ZDI-11-251: Apple QuickTime STSS atom Parsing Remote Code Execution Vulnerability