Matt Jurczyk

**Name of the Vulnerable Software and Affected Versions** Apple QuickTime versions prior to 7.7.1 **Description** The issue allows remote attackers to execute arbitrary code or cause a denial of service via a crafted movie file with FLC encoding. This can lead to an application crash. **Recommendations** For versions prior to 7.7.1, update to version 7.7.1 or later to resolve the issue. As a temporary workaround, consider avoiding the use of FLC encoded movie files until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Apple QuickTime versions prior to 7.7 **Description** The issue is related to an integer signedness error that can be triggered by a crafted PnSize opcode in a PICT file, leading to a stack-based buffer overflow. This can result in the execution of arbitrary code or cause a denial of service, such as an application crash. **Recommendations** For Apple QuickTime versions prior to 7.7, update to version 7.7 or later to resolve the issue.

**Name of the Vulnerable Software and Affected Versions** Apple QuickTime versions prior to 7.7 **Description** The issue is related to a heap-based buffer overflow that can be triggered by crafted STSC atoms in a QuickTime movie file, allowing remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash. **Recommendations** For versions prior to 7.7, update to version 7.7 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted QuickTime movie files that contain malicious STSC atoms until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Apple QuickTime versions prior to 7.7 **Description** The issue is related to a heap-based buffer overflow that can be triggered by crafted STSS atoms in a QuickTime movie file, allowing remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash. **Recommendations** For versions prior to 7.7, update to version 7.7 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted QuickTime movie files that contain malicious STSS atoms until the update is applied.

**Name of the Vulnerable Software and Affected Versions** Apple QuickTime versions prior to 7.7 **Description** The issue is related to a heap-based buffer overflow that can be triggered by crafted STSZ atoms in a QuickTime movie file, allowing remote attackers to execute arbitrary code or cause a denial of service, resulting in an application crash. **Recommendations** For versions prior to 7.7, update to version 7.7 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted QuickTime movie files that contain malicious STSZ atoms until the update is applied.