Apple QuickTime Heap Overflow in JVTCompEncodeFrame() Lets Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1017965
|
|
SecurityTracker URL: http://securitytracker.com/id?1017965
|
|
CVE Reference: CVE-2007-2295
(Links to External Site)
|
Updated: May 12 2008
|
Original Entry Date: Apr 26 2007
|
Impact: Execution of arbitrary code via network, User access via network
|
Fix Available: Yes
Exploit Included: Yes
Vendor Confirmed: Yes
|
Version(s): 7.1.5 and prior versions
|
Description: A vulnerability was reported in QuickTime. A remote user can cause arbitrary code to be executed on the target user's system.
A remote user can create a specially crafted '.mov' file that, when loaded by the target user, will trigger a heap overflow in JVTCompEncodeFrame()
and execute arbitrary code on the target system. The code will run with the privileges of the target user.
The vendor was notified
on March 28, 2006.
Tom Ferris of security-protocols.com discovered this vulnerability.
The original advisory is available
at:
http://security-protocols.com/sp-x45-advisory.php
|
Impact: A remote user can create a file that, when loaded by the target user, will execute arbitrary code on the target user's system.
|
Solution: Apple has issued a fix (7.2), in July 2007, available from the Software Update application, or from the Apple Downloads site at:
http://www.apple.com/support/downloads/
For Mac OS X v10.3.9 or later
The download file is named: "QuickTime720.dmg"
Its SHA-1 digest is: 391f359c8243b673bbd32c77a23416f5b0ebfd46
QuickTime
7.2 for Windows Vista/XP/2000
The download file is named: "QuickTimeInstaller.exe"
Its SHA-1 digest is: bb89981f10cf21de57b9453e53cf81b9194271a9
QuickTime
7.2 with iTunes for Windows Vista/XP/2000
The download file is named: "iTunesSetup.exe"
Its SHA-1 digest is: 77144b39b768143cb4882b7b6f463724f87fcbd8
The
Apple advisory is available at:
http://docs.info.apple.com/article.html?artnum=305947
|
Vendor URL: docs.info.apple.com/article.html?artnum=305947 (Links to External Site)
|
Cause: Boundary error
|
Underlying OS: UNIX (OS X), Windows (Any)
|
|
Message History:
None.
|
Source Message Contents
|
Date: Thu, 26 Apr 2007 01:27:37 -0400
Subject: Apple QuickTime .mov
|
http://security-protocols.com/sp-x45-advisory.php
|
|
