NetSight
IP …
medium6.8

CVE-2012-3722

The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, accesses uninitialized memory locations, which allows remote…

Impact

The Sorenson codec in QuickTime in Apple Mac OS X before 10.7.5, and in CoreMedia in iOS before 6, accesses uninitialized memory locations, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file with Sorenson encoding.

Affected products

VendorProductAffected versions
AppleMac Os X
through 10.7.4
Versions 10.0, 10.0.0, 10.0.1, 10.0.2, 10.0.3
AppleMac Os X Server
through 10.7.4
Versions 10.0, 10.0.0, 10.0.1, 10.0.2, 10.0.3
AppleIphone Os
through 5.1.1
Versions 1.0.0, 1.0.1, 1.0.2, 1.1.0, 1.1.1

Weakness classification

CWE-399

References