NetSight
critical9.3

CVE-2011-0248

Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers …

Impact

Stack-based buffer overflow in the QuickTime ActiveX control in Apple QuickTime before 7.7 on Windows, when Internet Explorer is used, allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted QTL file.

Affected products

VendorProductAffected versions
AppleQuicktime
through 7.6.9
Versions 3.0, 4.1.2, 5.0, 5.0.1, 5.0.2

Weakness classification

References