CVE-2004-0926
Heap-based buffer overflow in Apple QuickTime on Mac OS 10.2.8 through 10.3.5 may allow remote attackers to execute arbitrary code via a certain BMP image.
Date published : 2004-10-28
http://lists.apple.com/archives/security-announce/2004/Oct/msg00000.html
http://lists.apple.com/archives/security-announce/2004/Oct/msg00001.html