Buffer overflow in the data reference atom handling in Apple QuickTime prior to 7.4.5 allows remote malicious users to execute arbitrary code via a crafted movie.
apple quicktime