CVE-2013-1032: Buffer Overflow
QuickTime in Apple Mac OS X before 10.8.5 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via a crafted idsc atom in a QuickTime movie file.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2013-1032?
CVE-2013-1032 is categorized as a critical vulnerability that can allow remote attackers to execute arbitrary code or crash the application.
How do I fix CVE-2013-1032?
To fix CVE-2013-1032, upgrade QuickTime to the latest version or update your Mac OS X to 10.8.5 or later.
What systems are affected by CVE-2013-1032?
CVE-2013-1032 affects versions of Apple QuickTime prior to the patch and Mac OS X versions before 10.8.5.
What kind of attacks can CVE-2013-1032 facilitate?
CVE-2013-1032 can facilitate remote code execution and denial of service attacks through specially crafted QuickTime movie files.
Is there a workaround for CVE-2013-1032 if I cannot update immediately?
There is no official workaround for CVE-2013-1032, but avoiding the opening of untrusted QuickTime files can reduce risk.