← Database

CVE-2010-0529

CRITICAL CVSS: 9.3 Published: 2010-03-31 Modified: 2026-06-16

Description

Heap-based buffer overflow in QuickTime.qts in Apple QuickTime before 7.6.6 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a PICT image with a BkPixPat opcode (0x12) containing crafted values that are used in a calculation for memory allocation.

Affected Platforms

Microsoft Windows XpApple QuicktimeMicrosoft Windows 7Microsoft Windows Vista

Weakness Type

CWE-119

References