TUCoPS :: Apple(multi) :: va2397.htm

Apple QuickTime AVI Header nBlockAlign Heap Corruption Vulnerability
ZDI-09-006: Apple QuickTime AVI Header nBlockAlign Heap Corruption Vulnerability
ZDI-09-006: Apple QuickTime AVI Header nBlockAlign Heap Corruption Vulnerability


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TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH