CVE-2008-3629
Apple QuickTime before 7.5.5 allows remote attackers to cause a denial of service (application crash) via a crafted PICT image that triggers an out-of-bounds read.
Date published : 2008-09-10
http://lists.apple.com/archives/security-announce//2008/Sep/msg00000.html
http://lists.apple.com/archives/security-announce/2008/Oct/msg00000.html