Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
Heap-based buffer overflow in the QuickTime VR extension 7.2.0.240 in QuickTime.qts in Apple QuickTime before 7.3 allows remote attackers to execute arbitrary code via a QTVR (QuickTime Virtual Reality) movie file containing a large size field in the atom header of a panorama sample atom.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apple QuickTime全景示例原子处理远程堆溢出漏洞
Vulnerability Description
Apple QuickTime是一款流行的多媒体播放器，支持多种媒体格式。 QuickTime的实现上存在缓冲区溢出漏洞，远程攻击者可能利用此漏洞控制用户系统。 QuickTime播放器在处理QuickTime虚拟现实电影中的全景示例原子时没有验证原子头字段中的大小字段，可能会将指定数量的内存拷贝到固定大小的堆缓冲区中。如果用户受骗使用QuickTime打开了特制的电影文件的话，就可以触发这个堆溢出，导致执行任意代码。
CVSS Information
N/A
Vulnerability Type
N/A