No really. Its ANOTHER QuickTime flaw. It also involves RTSP. It was posted to Full Disclosure on Thursday afternoon. We have verified a crash on the latest OSX and are currently researching if it can lead to remote code execution and which platforms are affected.
The advisory is here:
http://aluigi.altervista.org/adv/quicktimebof-adv.txt
No comments:
Post a Comment