CoreAudio in Apple Mac OS X before 10.6.3 allows remote attackers to execute arbitrary code or cause a denial of service (memory corruption and application crash) via crafted audio content with QDM2 encoding, which triggers a buffer overflow due to inconsistent length fields, related to QDCA.
| Software | From | Fixed in |
|---|---|---|
| apple / mac_os_x | 10.6.0 | 10.6.0.x |
| apple / mac_os_x | 10.6.1 | 10.6.1.x |
| apple / mac_os_x | 10.6.2 | 10.6.2.x |
| apple / mac_os_x_server | 10.6.0 | 10.6.0.x |
| apple / mac_os_x_server | 10.6.1 | 10.6.1.x |
| apple / mac_os_x_server | 10.6.2 | 10.6.2.x |