eEye Security Advisory – eEye Digital Security has discovered a critical vulnerability in QuickTime Player. There is a stack overflow in the way QuickTime processes qtif format files. An attacker can create a qtif file and send it to the user via email, web page, or qtif file with activex and can directy overflow a function pointer immediately used so it can bypass any stack overflow protection in systems such as xp sp2 and 2003 sp1.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/43057/EEYEB-20051229.txt
Source: https://packetstormsecurity.com/files/43057/EEYEB-20051229.txt.html