TUCoPS :: Apple(multi) :: va2400.htm

Apple QuickTime VR Track Header Atom Heap Corruption Vulnerability
ZDI-09-005: Apple QuickTime VR Track Header Atom Heap Corruption Vulnerability
ZDI-09-005: Apple QuickTime VR Track Header Atom Heap Corruption Vulnerability



WkRJLTA5LTAwNTogQXBwbGUgUXVpY2tUaW1lIFZSIFRyYWNrIEhlYWRlciBBdG9tIEhlYXAgQ29y
cnVwdGlvbiANClZ1bG5lcmFiaWxpdHkNCmh0dHA6Ly93d3cuemVyb2RheWluaXRpYXRpdmUuY29t
L2Fkdmlzb3JpZXMvWkRJLTA5LTAwNQ0KSmFudWFyeSAyMSwgMjAwOQ0KDQotLSBDVkUgSUQ6DQpD
VkUtMjAwOS0wMDAyDQoNCi0tIEFmZmVjdGVkIFZlbmRvcnM6DQpBcHBsZQ0KDQotLSBBZmZlY3Rl
ZCBQcm9kdWN0czoNCkFwcGxlIFF1aWNrdGltZQ0KDQotLSBUaXBwaW5nUG9pbnQoVE0pIElQUyBD
dXN0b21lciBQcm90ZWN0aW9uOg0KVGlwcGluZ1BvaW50IElQUyBjdXN0b21lcnMgaGF2ZSBiZWVu
IHByb3RlY3RlZCBhZ2FpbnN0IHRoaXMNCnZ1bG5lcmFiaWxpdHkgYnkgRGlnaXRhbCBWYWNjaW5l
IHByb3RlY3Rpb24gZmlsdGVyIElEIDY0NDkuIA0KRm9yIGZ1cnRoZXIgcHJvZHVjdCBpbmZvcm1h
dGlvbiBvbiB0aGUgVGlwcGluZ1BvaW50IElQUywgdmlzaXQ6DQoNCiAgICBodHRwOi8vd3d3LnRp
cHBpbmdwb2ludC5jb20NCg0KLS0gVnVsbmVyYWJpbGl0eSBEZXRhaWxzOg0KVGhpcyB2dWxuZXJh
YmlsaXR5IGFsbG93cyBhdHRhY2tlcnMgdG8gZXhlY3V0ZSBhcmJpdHJhcnkgY29kZSBvbg0KdnVs
bmVyYWJsZSBpbnN0YWxsYXRpb25zIG9mIEFwcGxlIFF1aWNrdGltZSBQbGF5ZXIuIFVzZXIgaW50
ZXJhY3Rpb24gaXMNCnJlcXVpcmVkIHRvIGV4cGxvaXQgdGhpcyB2dWxuZXJhYmlsaXR5IGluIHRo
YXQgdGhlIHRhcmdldCBtdXN0IHZpc2l0IGENCm1hbGljaW91cyBwYWdlIG9yIG9wZW4gYSBtYWxp
Y2lvdXMgZmlsZS4NCg0KVGhlIHNwZWNpZmljIGZsYXcgZXhpc3RzIHdpdGhpbiB0aGUgcGFyc2lu
ZyBvZiAndGtoZCcgYXRvbXMgZm91bmQgaW5zaWRlDQpRdWlja1RpbWVWUiBmaWxlcy4gSW1wcm9w
ZXIgdmFsaWRhdGlvbiBvZiB0aGUgdHJhbnNmb3JtIG1hdHJpeCBkYXRhDQpyZXN1bHRzIGluIGEg
aGVhcCBjaHVuayBoZWFkZXIgb3ZlcndyaXRlIGxlYWRpbmcgdG8gYXJiaXRyYXJ5IGNvZGUNCmV4
ZWN1dGlvbiB1bmRlciB0aGUgY29udGV4dCBvZiB0aGUgY3VycmVudGx5IGxvZ2dlZCBpbiB1c2Vy
Lg0KDQotLSBWZW5kb3IgUmVzcG9uc2U6DQpBcHBsZSBoYXMgaXNzdWVkIGFuIHVwZGF0ZSB0byBj
b3JyZWN0IHRoaXMgdnVsbmVyYWJpbGl0eS4gTW9yZQ0KZGV0YWlscyBjYW4gYmUgZm91bmQgYXQ6
DQoNCmh0dHA6Ly9zdXBwb3J0LmFwcGxlLmNvbS9rYi9IVDM0MDMNCg0KLS0gRGlzY2xvc3VyZSBU
aW1lbGluZToNCjIwMDgtMDktMTYgLSBWdWxuZXJhYmlsaXR5IHJlcG9ydGVkIHRvIHZlbmRvcg0K
MjAwOS0wMS0yMSAtIENvb3JkaW5hdGVkIHB1YmxpYyByZWxlYXNlIG9mIGFkdmlzb3J5DQoNCi0t
IENyZWRpdDoNClRoaXMgdnVsbmVyYWJpbGl0eSB3YXMgZGlzY292ZXJlZCBieToNCiAgICAqIEFu
b255bW91cw0KDQotLSBBYm91dCB0aGUgWmVybyBEYXkgSW5pdGlhdGl2ZSAoWkRJKToNCkVzdGFi
bGlzaGVkIGJ5IFRpcHBpbmdQb2ludCwgVGhlIFplcm8gRGF5IEluaXRpYXRpdmUgKFpESSkgcmVw
cmVzZW50cyANCmEgYmVzdC1vZi1icmVlZCBtb2RlbCBmb3IgcmV3YXJkaW5nIHNlY3VyaXR5IHJl
c2VhcmNoZXJzIGZvciByZXNwb25zaWJseQ0KZGlzY2xvc2luZyBkaXNjb3ZlcmVkIHZ1bG5lcmFi
aWxpdGllcy4NCg0KUmVzZWFyY2hlcnMgaW50ZXJlc3RlZCBpbiBnZXR0aW5nIHBhaWQgZm9yIHRo
ZWlyIHNlY3VyaXR5IHJlc2VhcmNoDQp0aHJvdWdoIHRoZSBaREkgY2FuIGZpbmQgbW9yZSBpbmZv
cm1hdGlvbiBhbmQgc2lnbi11cCBhdDoNCg0KICAgIGh0dHA6Ly93d3cuemVyb2RheWluaXRpYXRp
dmUuY29tDQoNClRoZSBaREkgaXMgdW5pcXVlIGluIGhvdyB0aGUgYWNxdWlyZWQgdnVsbmVyYWJp
bGl0eSBpbmZvcm1hdGlvbiBpcw0KdXNlZC4gVGlwcGluZ1BvaW50IGRvZXMgbm90IHJlLXNlbGwg
dGhlIHZ1bG5lcmFiaWxpdHkgZGV0YWlscyBvciBhbnkNCmV4cGxvaXQgY29kZS4gSW5zdGVhZCwg
dXBvbiBub3RpZnlpbmcgdGhlIGFmZmVjdGVkIHByb2R1Y3QgdmVuZG9yLA0KVGlwcGluZ1BvaW50
IHByb3ZpZGVzIGl0cyBjdXN0b21lcnMgd2l0aCB6ZXJvIGRheSBwcm90ZWN0aW9uIHRocm91Z2gN
Cml0cyBpbnRydXNpb24gcHJldmVudGlvbiB0ZWNobm9sb2d5LiBFeHBsaWNpdCBkZXRhaWxzIHJl
Z2FyZGluZyB0aGUNCnNwZWNpZmljcyBvZiB0aGUgdnVsbmVyYWJpbGl0eSBhcmUgbm90IGV4cG9z
ZWQgdG8gYW55IHBhcnRpZXMgdW50aWwNCmFuIG9mZmljaWFsIHZlbmRvciBwYXRjaCBpcyBwdWJs
aWNseSBhdmFpbGFibGUuIEZ1cnRoZXJtb3JlLCB3aXRoIHRoZQ0KYWx0cnVpc3RpYyBhaW0gb2Yg
aGVscGluZyB0byBzZWN1cmUgYSBicm9hZGVyIHVzZXIgYmFzZSwgVGlwcGluZ1BvaW50DQpwcm92
aWRlcyB0aGlzIHZ1bG5lcmFiaWxpdHkgaW5mb3JtYXRpb24gY29uZmlkZW50aWFsbHkgdG8gc2Vj
dXJpdHkNCnZlbmRvcnMgKGluY2x1ZGluZyBjb21wZXRpdG9ycykgd2hvIGhhdmUgYSB2dWxuZXJh
YmlsaXR5IHByb3RlY3Rpb24gb3INCm1pdGlnYXRpb24gcHJvZHVjdC4NCg0KT3VyIHZ1bG5lcmFi
aWxpdHkgZGlzY2xvc3VyZSBwb2xpY3kgaXMgYXZhaWxhYmxlIG9ubGluZSBhdDoNCg0KICAgIGh0
dHA6Ly93d3cuemVyb2RheWluaXRpYXRpdmUuY29tL2Fkdmlzb3JpZXMvZGlzY2xvc3VyZV9wb2xp
Y3kvDQoNCkNPTkZJREVOVElBTElUWSBOT1RJQ0U6IFRoaXMgZS1tYWlsIG1lc3NhZ2UsIGluY2x1
ZGluZyBhbnkgYXR0YWNobWVudHMsDQppcyBiZWluZyBzZW50IGJ5IDNDb20gZm9yIHRoZSBzb2xl
IHVzZSBvZiB0aGUgaW50ZW5kZWQgcmVjaXBpZW50KHMpIGFuZA0KbWF5IGNvbnRhaW4gY29uZmlk
ZW50aWFsLCBwcm9wcmlldGFyeSBhbmQvb3IgcHJpdmlsZWdlZCBpbmZvcm1hdGlvbi4NCkFueSB1
bmF1dGhvcml6ZWQgcmV2aWV3LCB1c2UsIGRpc2Nsb3N1cmUgYW5kL29yIGRpc3RyaWJ1dGlvbiBi
eSBhbnkgDQpyZWNpcGllbnQgaXMgcHJvaGliaXRlZC4gIElmIHlvdSBhcmUgbm90IHRoZSBpbnRl
bmRlZCByZWNpcGllbnQsIHBsZWFzZQ0KZGVsZXRlIGFuZC9vciBkZXN0cm95IGFsbCBjb3BpZXMg
b2YgdGhpcyBtZXNzYWdlIHJlZ2FyZGxlc3Mgb2YgZm9ybSBhbmQNCmFueSBpbmNsdWRlZCBhdHRh
Y2htZW50cyBhbmQgbm90aWZ5IDNDb20gaW1tZWRpYXRlbHkgYnkgY29udGFjdGluZyB0aGUNCnNl
bmRlciB2aWEgcmVwbHkgZS1tYWlsIG9yIGZvcndhcmRpbmcgdG8gM0NvbSBhdCBwb3N0bWFzdGVy
QDNjb20uY29tLiANCg=

TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH