NetSight
IP …
medium6.8Public exploit code

CVE-2010-0520

Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a …

Public exploit code

Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.

Impact

Heap-based buffer overflow in QuickTimeAuthoring.qtx in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted FLC file, related to crafted DELTA_FLI chunks and untrusted length values in a .fli file, which are not properly handled during decompression.

Affected products

VendorProductAffected versions
AppleMac Os X
Versions 10.6.0, 10.6.1, 10.6.2
AppleMac Os X Server
Versions 10.6.0, 10.6.1, 10.6.2

Weakness classification

CWE-119

References