The issue involves the `QuickTime` component and allows remote attackers to execute arbitrary code or cause a denial of service, including memory corruption and application crash, via a crafted media file. This is due to a buffer overflow on the stack.