Integer overflow in Apple QuickTime Player 7.0.3 and 7.0.4 and iTunes 6.0.1 and 6.0.2 allows remote attackers to execute arbitrary code via a FlashPix (FPX) image that contains a field that specifies a large number of blocks.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Itunes | Apple | 6.0.1 (including) | 6.0.1 (including) |
| Itunes | Apple | 6.0.2 (including) | 6.0.2 (including) |
| Quicktime | Apple | 7.0.3 (including) | 7.0.3 (including) |
| Quicktime | Apple | 7.0.4 (including) | 7.0.4 (including) |