The host is installed with Apple QuickTime before 7.4.5 and is prone to a stack based buffer overflow vulnerability. A flaw is present in the application, which fails to properly handle a crafted VR movie with an obji atom of zero size. Successful exploitation could allow attackers to execute arbitrary code.