CVE-2011-0258

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.7

Description The issue allows remote attackers to execute arbitrary code or cause a denial of service, resulting in memory corruption and application crash. This is achieved through a crafted image description associated with an mp4v tag in a movie file.

Recommendations For versions prior to 7.7, update to version 7.7 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted movie files that contain a malicious mp4v tag until the update is applied.