Off-by-one error in QuickTime in Apple Mac OS X before 10.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted rdrf atom in a movie file that triggers a buffer overflow.
Vector
NETWORK
Complexity
MEDIUM
Authentication
NONE
Confidentiality
PARTIAL
Integrity
PARTIAL
Availability
PARTIAL
Apache Software Foundation POI 1.2.0
Apache Software Foundation Roller 0.9.6.3
Apache Software Foundation POI 0.5
Apache Software Foundation POI 0.3
Apache Software Foundation POI 1.0.1
Apache Software Foundation POI 0.6
Apache Software Foundation POI 0.7
Apache Software Foundation POI 0.4
Apache Software Foundation POI 1.0.2
Apache Software Foundation POI 1.5
Apache Software Foundation POI 1.1.0
Apache Software Foundation POI 1.0 dev
Apache Software Foundation POI 1.0.0
Apache Software Foundation Rave 0.20
Apache Software Foundation Roller 0.9.6.4
Apache Software Foundation Rave 0.18
Apache Software Foundation Roller 0.9.6
Apache Software Foundation Roller 0.9.5
Apache Software Foundation Rave 0.16
Apache Software Foundation Rave 0.19
Apache Software Foundation Rave 0.15
Apache Software Foundation Rave 0.14
Apache Software Foundation Rave 0.17
Apache Software Foundation Rave 0.13
| Advisory | Patch | Confirmed | Link |
|---|---|---|---|
| http://support.apple.com/kb/HT5261 | |||
| http://support.apple.com/kb/HT5130 | |||
| APPLE-SA-2012-05-15-1 | |||
| APPLE-SA-2012-02-01-1 |