TUCoPS :: Apple(multi) :: va2406.htm

Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability
ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability
ZDI-09-007: Apple QuickTime Cinepak Codec MDAT Heap Corruption Vulnerability


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TUCoPS is optimized to look best in Firefox® on a widescreen monitor (1440x900 or better).
Site design & layout copyright © 1986-2024 AOH