Vulnerability Spotlight: Apple Quicktime Corrupt stbl Atom Remote Code Execution
Summary: Cisco Talos disclosed a remote code execution vulnerability in Apple QuickTime, TALOS-2015-0018/CVE-2015-3667, reported to Apple on May 8, 2015 and patched June 30, 2015. An attacker who controls data inside an stbl atom in a .MOV file can trigger an undersized allocation and out-of-bounds read, leading to a use-after-free that could allow remote code execution.
Why it matters: The flaw sits in how QuickTime parses a media file, so the delivery path is a .MOV file opened by a user - and Talos shipped Snort rules 35022-35023 to catch it, which only helps organizations that have that detection in place.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Mentions
- CVE-2015-3667
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026