Lucene search

K
zdiAnonymousZDI-08-058
HistorySep 09, 2008 - 12:00 a.m.

Apple QuickTime Panorama PDAT Atom Parsing Buffer Overflow Vulnerability

2008-09-0900:00:00
Anonymous
www.zerodayinitiative.com
24

EPSS

0.436

Percentile

97.4%

This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists in the handling of panorama track PDAT atoms. When the maxTilt, minFieldOfView and maxFieldOfView elements are corrupted, a stack buffer overflow occurs which can be further leveraged to execute arbitrary code under the context of the current user.