Cyber Risks · Cisco Talos

Talos Identifies Multiple Memory Corruption Issues in Quicktime

Summary: Cisco Talos released six advisories for memory corruption vulnerabilities it found in Apple QuickTime, reported to Apple and CERT under its vendor vulnerability reporting and disclosure policy. Apple issued security advisories on August 13 and August 20 addressing the issues, which affect QuickTime for OS X and Windows and were credited to Talos researchers Ryan Pentney and Richard Johnson.

Why it matters: Six memory corruption flaws in a media player that runs on both OS X and Windows means a malicious file could be the entry point, and the disclosure only arrived in coordination with Apple and CERT weeks after discovery.

Read the original at Cisco Talos ↗

Topics
Zero-Days & Exploits
Related