This site is deprecated. Please
CLICK HERE for latest updates
Short Name |
HTTP:APPLE-QT-TTD-BO
|
Severity |
Major
|
Recommended |
No
|
Recommended Action |
Drop
|
Category |
HTTP
|
Keywords |
Apple Quicktime Text Track Descriptors Heap Buffer Overflow
|
Release Date |
2013/08/22
|
Update Number |
2292
|
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+
|
HTTP: Apple Quicktime Text Track Descriptors Heap Buffer Overflow
This signature detects attempts to exploit a known vulnerability in Apple Quicktime. The vulnerability is due to improper validation on parameter lengths of Text Track Descriptors. The overly long parameter can be copied by the vulnerable code into a fixed length heap buffer. This vulnerability can be exploited by a remote attacker by enticing the target user to open a specially crafted text track or movie file with the affected application. Successful exploitation could result in arbitrary code injection and execution in the context of the currently logged-in user.
Extended Description
Heap-based buffer overflow in Apple QuickTime before 7.7.2 on Windows allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted text track in a movie file.
Affected Products
- Apple quicktime 3.0
- Apple quicktime 4.1.2
- Apple quicktime 5.0
- Apple quicktime 5.0.1
- Apple quicktime 5.0.2
- Apple quicktime 6.0
- Apple quicktime 6.0.0
- Apple quicktime 6.0.1
- Apple quicktime 6.0.2
- Apple quicktime 6.1
- Apple quicktime 6.1.0
- Apple quicktime 6.1.1
- Apple quicktime 6.2.0
- Apple quicktime 6.3.0
- Apple quicktime 6.4.0
- Apple quicktime 6.5
- Apple quicktime 6.5.0
- Apple quicktime 6.5.1
- Apple quicktime 6.5.2
- Apple quicktime 7.0
- Apple quicktime 7.0.0
- Apple quicktime 7.0.1
- Apple quicktime 7.0.2
- Apple quicktime 7.0.3
- Apple quicktime 7.0.4
- Apple quicktime 7.1
- Apple quicktime 7.1.0
- Apple quicktime 7.1.1
- Apple quicktime 7.1.2
- Apple quicktime 7.1.3
- Apple quicktime 7.1.4
- Apple quicktime 7.1.5
- Apple quicktime 7.1.6
- Apple quicktime 7.2
- Apple quicktime 7.2.0
- Apple quicktime 7.2.1
- Apple quicktime 7.3
- Apple quicktime 7.3.0
- Apple quicktime 7.3.1
- Apple quicktime 7.3.1.70
- Apple quicktime 7.4
- Apple quicktime 7.4.0
- Apple quicktime 7.4.1
- Apple quicktime 7.4.5
- Apple quicktime 7.5.0
- Apple quicktime 7.5.5
- Apple quicktime 7.6.0
- Apple quicktime 7.60.92.0
- Apple quicktime 7.6.1
- Apple quicktime 7.6.2
- Apple quicktime 7.62.14.0
- Apple quicktime 7.64.17.73
- Apple quicktime 7.6.5
- Apple quicktime 7.65.17.80
- Apple quicktime 7.6.6
- Apple quicktime 7.66.71.0
- Apple quicktime 7.6.7
- Apple quicktime 7.67.75.0
- Apple quicktime 7.6.8
- Apple quicktime 7.68.75.0
- Apple quicktime 7.6.9
- Apple quicktime 7.69.80.9
- Apple quicktime 7.7.0
- Apple quicktime 7.7.1
References