CVE-2010-0062: Buffer Overflow
Heap-based buffer overflow in quicktime.qts in CoreMedia and QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a malformed .3g2 movie file with H.263 encoding that triggers an incorrect buffer length calculation.
Affected Software
Remediation
Patch Available
Event History
Frequently Asked Questions
What is the severity of CVE-2010-0062?
CVE-2010-0062 is classified as a critical vulnerability due to its potential for remote code execution and denial of service.
How do I fix CVE-2010-0062?
To fix CVE-2010-0062, update your Apple Mac OS X to version 10.6.3 or later.
What are the affected versions for CVE-2010-0062?
CVE-2010-0062 affects Apple Mac OS X versions 10.6.0, 10.6.1, and 10.6.2.
What type of attack can exploit CVE-2010-0062?
CVE-2010-0062 can be exploited through a specially crafted .3g2 movie file that causes a heap-based buffer overflow.
What systems are impacted by CVE-2010-0062?
CVE-2010-0062 impacts both standalone and server versions of Apple Mac OS X prior to 10.6.3.