TUCoPS :: Apple(multi)

TUCoPS :: Apple(multi) :: va1206.htm
Apple QuickTime STSZ Atom Parsing Heap Corruption Vulnerability
ZDI-08-059: Apple QuickTime STSZ Atom Parsing Heap Corruption Vulnerability ZDI-08-059: Apple QuickTime STSZ Atom Parsing Heap Corruption Vulnerability
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