← Database

CVE-2006-1249

MEDIUM CVSS: 6.8 Published: 2006-03-19 Modified: 2026-06-16

Description

Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows remote attackers to execute arbitrary code via a FlashPix (FPX) image that contains a field that specifies a large number of blocks.

Affected Platforms

Apple ItunesApple Quicktime

Weakness Type

CWE-189

References