|CVSS SCORE||9, (AV:N/AC:L/Au:N/C:P/I:P/A:C)|
|TIPPINGPOINT™ IPS CUSTOMER PROTECTION||TippingPoint IPS customers are protected against this vulnerability by Digital Vaccine protection filter ID 11804. For further product information on the TippingPoint IPS: http://www.tippingpoint.com|
The specific flaw exists within how QuickTime.qts parses a data handler in specific atom within a .mov file. The application will utilize a string length to copy data into an heap buffer, if the string is of zero-length, the application will fail to copy anything and then proceed to use the uninitialized buffer as a string.
Apple has issued an update to correct this vulnerability. More details can be found at: