RETIRED: Apple QuickTime Multiple Code Execution Vulnerabilities
BID:16202
Info
RETIRED: Apple QuickTime Multiple Code Execution Vulnerabilities
| Bugtraq ID: | 16202 |
| Class: | Boundary Condition Error |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Jan 10 2006 12:00AM |
| Updated: | May 01 2008 06:56PM |
| Credit: | Varun Uppal, Dejun Meng, Fang Xing and Karl Lynn are credited with the discovery of these issues. |
| Vulnerable: |
Apple QuickTime Player 7.0.3 Apple QuickTime Player 7.0.2 Apple QuickTime Player 7.0.1 Apple QuickTime Player 7.0 Apple QuickTime Player 6.5.2 Apple QuickTime Player 6.4 |
| Not Vulnerable: |
Apple QuickTime Player 7.0.4 |
Discussion
RETIRED: Apple QuickTime Multiple Code Execution Vulnerabilities
Apple QuickTime is prone to multiple remote code-execution vulnerabilities.
These issues arise when the application handles specially crafted QTIF, TGA, TIFF, and GIF image formats.
Successful exploits of these issues may allow remote attackers to trigger a denial-of-service condition or to gain unauthorized access.
Versions prior to QuickTime 7.0.4 are vulnerable.
NOTE: This BID is being retired because the issues are now documented in the following individual records:
16852 Apple QuickTime QTIF Image Processing Remote Heap Overflow Vulnerability
16864 Apple QuickTime GIF Image Processing Remote Heap Overflow Vulnerability
16867 Apple QuickTime TIFF Image Processing Remote Integer Overflow Vulnerability
16869 Apple QuickTime TIFF Image Processing Strips/Bands Integer Overflow Vulnerability
16872 Apple QuickTime TGA Image Processing Remote Buffer Overflow Vulnerability
16873 Apple QuickTime TGA Image Processing Remote Integer Overflow Vulnerability
16875 Apple QuickTime TGA Image Processing Remote Integer Underflow Vulnerability
Apple QuickTime is prone to multiple remote code-execution vulnerabilities.
These issues arise when the application handles specially crafted QTIF, TGA, TIFF, and GIF image formats.
Successful exploits of these issues may allow remote attackers to trigger a denial-of-service condition or to gain unauthorized access.
Versions prior to QuickTime 7.0.4 are vulnerable.
NOTE: This BID is being retired because the issues are now documented in the following individual records:
16852 Apple QuickTime QTIF Image Processing Remote Heap Overflow Vulnerability
16864 Apple QuickTime GIF Image Processing Remote Heap Overflow Vulnerability
16867 Apple QuickTime TIFF Image Processing Remote Integer Overflow Vulnerability
16869 Apple QuickTime TIFF Image Processing Strips/Bands Integer Overflow Vulnerability
16872 Apple QuickTime TGA Image Processing Remote Buffer Overflow Vulnerability
16873 Apple QuickTime TGA Image Processing Remote Integer Overflow Vulnerability
16875 Apple QuickTime TGA Image Processing Remote Integer Underflow Vulnerability
Exploit / POC
RETIRED: Apple QuickTime Multiple Code Execution Vulnerabilities
UPDATE: Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
UPDATE: Core Security Technologies has developed a working commercial exploit for its CORE IMPACT product. This exploit is not otherwise publicly available or known to be circulating in the wild.
Solution / Fix
RETIRED: Apple QuickTime Multiple Code Execution Vulnerabilities
Solution:
Apple has released advisory APPLE-SA-2006-01-10 including QuickTime 7.0.4 to address these issues. Please see the references for more information.
Apple QuickTime Player 7.0.3
Solution:
Apple has released advisory APPLE-SA-2006-01-10 including QuickTime 7.0.4 to address these issues. Please see the references for more information.
Apple QuickTime Player 7.0.3
-
Apple QuickTime 7.0.4
http://www.apple.com/quicktime/
References
RETIRED: Apple QuickTime Multiple Code Execution Vulnerabilities
References:
References:
- Apple QuickTime Homepage (Apple)
- [EEYEB-20051031] Apple QuickTime Malformed GIF Heap Overflow ("Advisories"
- [EEYEB-20051220] Apple QuickTime QTIF Stack Overflow ("Advisories"
- Fortinet Advisory - Apple QuickTime Player StripByteCounts Buffer Overflow Vulne ([email protected])
- Fortinet Advisory - Apple QuickTime Player StripOffsets Improper Memory Access ([email protected])