Integer Signedness Error in Apple QuickTime: Remote Code Execution and Denial of Service Vulnerability

Integer Signedness Error in Apple QuickTime: Remote Code Execution and Denial of Service Vulnerability

CVE-2010-3802 · HIGH Severity

AV:N/AC:M/AU:N/C:C/I:C/A:C

Integer signedness error in Apple QuickTime before 7.6.9 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted panorama atom in a QuickTime Virtual Reality (QTVR) movie file.

Learn more about our Web Application Penetration Testing UK.