TUCoPS :: Macintosh :: tb13295.htm

TUCoPS :: Macintosh :: tb13295.htm
Apple QuickTime PICT File Poly Opcodes Heap Corruption Vulnerability
ZDI-07-067: Apple QuickTime PICT File Poly Opcodes Heap Corruption Vulnerability ZDI-07-067: Apple QuickTime PICT File Poly Opcodes Heap Corruption Vulnerability
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