Integer overflow in QuickTime in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a FlashPix image with a malformed SubImage Header Stream containing a NumberOfTiles field with a large value.
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Mac_os_x | Apple | 10.6.0 (including) | 10.6.0 (including) |
| Mac_os_x | Apple | 10.6.1 (including) | 10.6.1 (including) |
| Mac_os_x | Apple | 10.6.2 (including) | 10.6.2 (including) |
| Mac_os_x_server | Apple | 10.6.0 (including) | 10.6.0 (including) |
| Mac_os_x_server | Apple | 10.6.1 (including) | 10.6.1 (including) |
| Mac_os_x_server | Apple | 10.6.2 (including) | 10.6.2 (including) |