Apple QuickTime CVE-2014-1243 Remote Memory Corruption Vulnerability

Bugtraq ID:	65784
Class:	Boundary Condition Error
CVE:	CVE-2014-1243
Remote:	Yes
Local:	No
Published:	Feb 25 2014 12:00AM
Updated:	Feb 25 2014 12:00AM
Credit:	Tom Gallagher (Microsoft) & Paul Bates (Microsoft) working with HP's Zero Day Initiative
Vulnerable:
Not Vulnerable:

Apple QuickTime CVE-2014-1243 Remote Memory Corruption Vulnerability

Apple QuickTime is prone to a remote memory-corruption vulnerability.

Successful exploits may allow attackers to execute arbitrary code in the context of the currently logged-in user; failed exploit attempts will cause denial-of-service conditions.

Versions prior to QuickTime 7.7.5 are vulnerable on Windows 7, Vista, and XP SP2.

Apple QuickTime CVE-2014-1243 Remote Memory Corruption Vulnerability

Currently, we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].

Apple QuickTime CVE-2014-1243 Remote Memory Corruption Vulnerability

Solution:
Updates are available. Please see the references or vendor advisory for more information.

Apple QuickTime CVE-2014-1243 Remote Memory Corruption Vulnerability

References:

• Apple QuickTime Homepage (Apple)