Apple QuickTime CVE-2012-3757 Memory Corruption Vulnerability

Bugtraq ID:	56556
Class:	Boundary Condition Error
CVE:	CVE-2012-3757
Remote:	Yes
Local:	No
Published:	Nov 07 2012 12:00AM
Updated:	Nov 07 2012 12:00AM
Credit:	Jeremy Brown at Microsoft and Microsoft Vulnerability Research (MSVR)
Vulnerable:	Apple QuickTime Player 7.7.2 Apple QuickTime Player 7.7.1 Apple QuickTime Player 7.6.8 Apple QuickTime Player 7.6.7 Apple QuickTime Player 7.6.6 Apple QuickTime Player 7.6.5 Apple QuickTime Player 7.6.4 Apple QuickTime Player 7.6.2 Apple QuickTime Player 7.6.1 Apple QuickTime Player 7.5.5 + Apple Mac OS X 10.4.9 + Apple Mac OS X 10.3.9 + Apple Mac OS X 10.5 + Apple Mac OS X Server 10.4.9 + Apple Mac OS X Server 10.3.9 + Apple Mac OS X Server 10.5 Apple QuickTime Player 7.4.5 + Apple Mac OS X 10.4.9 + Apple Mac OS X 10.3.9 + Apple Mac OS X 10.5 + Apple Mac OS X Server 10.4.9 + Apple Mac OS X Server 10.3.9 + Apple Mac OS X Server 10.5 Apple QuickTime Player 7.4.1 Apple QuickTime Player 7.7 Apple QuickTime Player 7.6.9 Apple QuickTime Player 7.6 Apple QuickTime Player 7.5 Apple QuickTime Player 7.4
Not Vulnerable:	Apple QuickTime Player 7.7.3

Apple QuickTime CVE-2012-3757 Memory Corruption Vulnerability

Solution:
Vendor updates are available. Please see the references for more information.


Apple QuickTime Player 7.7

• Apple APPLE-SA-2012-11-7-1-QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.7.1

• Apple APPLE-SA-2012-11-7-1-QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime Player 7.7.2

• Apple APPLE-SA-2012-11-7-1-QuickTimeInstaller.exe
  http://www.apple.com/quicktime/download/

Apple QuickTime CVE-2012-3757 Memory Corruption Vulnerability

References:

• Apple QuickTime Homepage (Apple)