CVE-2013-1024 in Apple Mac OS X

Summary

CoreMedia Playback in Apple Mac OS X before 10.8.4 does not properly initialize memory during the processing of text tracks, which allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted movie file.

Reservation

01/10/2013

Disclosure

06/05/2013

Entries

VulDB provides additional information and datapoints for this CVE:

ID	Vulnerability	CWE	Exp	Cou	CVE
9008	Apple Mac OS X CoreMedia Playback DSTCPEndpoint.cpp AllocFromProxyStruct input validation	20	Not defined	Official fix	CVE-2013-1024