Vulnerability Spotlight: Apple Quicktime Corrupt stbl Atom Remote Code Execution
Cisco Talos disclosed a remote code execution vulnerability in Apple QuickTime, TALOS-2015-0018/CVE-2015-3667, reported to Apple on May 8, 2015 and patched June 30, 2015. An attacker who controls data inside an stbl atom in a .MOV file can trigger an...