eEye Security Advisory – eEye Digital Security has discovered a critical vulnerability in Apple’s QuickTime Player. The vulnerability allows a remote attacker to reliably overwrite heap memory with user-controlled data and execute arbitrary code within the SYSTEM context. Versions affected are Apple QuickTime 6.5 and Apple iTunes 4.2.0.72.
You can download this advisory from the following link: https://packetstormsecurity.com/files/download/33233/eEye.quicktime.txt
Source: https://packetstormsecurity.com/files/33233/eEye.quicktime.txt.html