The quicktime_video_width function in lqt_quicktime.c in libquicktime 1.2.4 allows remote attackers to cause a denial of service (heap-based buffer over-read and application crash) via a crafted mp4 file. The associated identifier of this vulnerability is VDB-213543.Ī remote code execution vulnerability exists when Windows Media Foundation improperly parses specially crafted QuickTime media files.An attacker who successfully exploited this vulnerability could gain the same user rights as the local user, aka 'Microsoft Windows Media Foundation Remote Code Execution Vulnerability'.Īn integer overflow error within the 'parse_qt()' function (internal/dcraw_common.cpp) in LibRaw versions prior to 0.18.12 can be exploited to trigger an infinite loop via a specially crafted Apple QuickTime file. It is recommended to apply a patch to fix this issue. It is possible to initiate the attack remotely. The manipulation of the argument y_size leads to out-of-bounds read. This affects an unknown part of the file libavcodec/rpzaenc.c of the component QuickTime RPZA Video Encoder.

The identifier of this vulnerability is VDB-213544.Ī vulnerability classified as problematic has been found in ffmpeg.

This vulnerability affects the function smc_encode_stream of the file libavcodec/smcenc.c of the component QuickTime Graphics Video Encoder. A vulnerability classified as problematic was found in ffmpeg.

Quicktime download 7.6.6