ZDI Disclosures | 27 Jun 2012 17:38

ZDI-12-103 : Apple Quicktime Dataref URI Buffer Remote Code Execution


Correcting Subject line

-----Original Message-----
From: ZDI Disclosures 
Sent: Wednesday, June 27, 2012 10:38 AM
To: 'full-disclosure <at> lists.grok.org.uk'; 'bugtraq <at> securityfocus.com'
Cc: ZDI Disclosures
Subject: -----BEGIN PGP SIGNED MESSAGE-----

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

ZDI-12-103 : Apple Quicktime Dataref URI Buffer Remote Code Execution
Vulnerability
http://www.zerodayinitiative.com/advisories/ZDI-12-103
June 27, 2012

-- CVE ID:
CVE-2011-3459

-- CVSS:
7.5, AV:N/AC:L/Au:N/C:P/I:P/A:P

-- Affected Vendors:
Apple

-- Affected Products:
Apple QuickTime

(Continue reading)


Gmane