Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The CallComponentFunctionWithStorage function in Apple QuickTime before 7.5.5 does not properly handle a large entry in the sample_size_table in STSZ atoms, which allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted movie file.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Apple QuickTime CllComponentFunctionWithStorage() 代码执行漏洞
Vulnerability Description
Apple QuickTime是一款非常流行的多媒体播放器。 Apple QuickTime 7.5.5之前版本中的CllComponentFunctionWithStorage函数存在代码执行漏洞。 由于在STSZ atoms的sample_size_table中不能正确处理较大的entry，这使得远程攻击者可使用特别构造的电影文件，执行任意代码或导致拒绝服务(内存错误及程序崩溃)。
CVSS Information
N/A
Vulnerability Type
N/A