critical9.3
CVE-2014-1250
Apple QuickTime before 7.7.5 does not properly perform a byte-swapping operation, which allows remote attackers to execute arbitrary code or cause a denial of …
Impact
Apple QuickTime before 7.7.5 does not properly perform a byte-swapping operation, which allows remote attackers to execute arbitrary code or cause a denial of service (out-of-bounds memory access and application crash) via a crafted ttfo element in a movie file.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Apple | Quicktime | through 7.7.4 Versions 7.0.0, 7.0.1, 7.0.2, 7.0.3, 7.0.4 |