Apple QuickTime Multiple Overflow and Exception Vulnerabilities
BID:19976
CVE-2006-4381 | CVE-2006-4382 | CVE-2006-4384 | CVE-2006-4385 | CVE-2006-4386 | CVE-2006-4388 | CVE-2006-4389 |Info
Apple QuickTime Multiple Overflow and Exception Vulnerabilities
| Bugtraq ID: | 19976 |
| Class: | Unknown |
| CVE: |
CVE-2006-4381 CVE-2006-4382 CVE-2006-4384 CVE-2006-4385 CVE-2006-4386 CVE-2006-4388 CVE-2006-4389 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 12 2006 12:00AM |
| Updated: | Mar 04 2008 11:32PM |
| Credit: | Sowhat of Nevis Labs, Mike Price of McAfee AVERT Labs, Piotr Bania, and Ruben Santamarta are credited with the discovery of these vulnerabilities. |
| Vulnerable: |
Gentoo media-libs/win32codecs 20071007-r2 Gentoo Linux Apple QuickTime Player 7.1.2 Apple QuickTime Player 7.1.1 Apple QuickTime Player 7.0.4 Apple QuickTime Player 7.0.3 Apple QuickTime Player 7.0.2 Apple QuickTime Player 7.0.1 Apple QuickTime Player 7.0 Apple QuickTime Player 6.5.2 Apple QuickTime Player 6.5.1 Apple QuickTime Player 6.5 Apple QuickTime Player 6.1 Apple QuickTime Player 5.0.2 Apple QuickTime Player 7.1 Apple QuickTime Player 6 |
| Not Vulnerable: |
Apple QuickTime Player 7.1.3 |
Discussion
Apple QuickTime Multiple Overflow and Exception Vulnerabilities
Apple QuickTime is prone to multiple vulnerabilities because it fails to properly bounds-check and sanitize user-supplied data.
An attacker can exploit these issues to execute arbitrary code in the context of the victim user running the vulnerable application. Successful exploits may facilitate a remote compromise of affected computers.
Apple QuickTime is prone to multiple vulnerabilities because it fails to properly bounds-check and sanitize user-supplied data.
An attacker can exploit these issues to execute arbitrary code in the context of the victim user running the vulnerable application. Successful exploits may facilitate a remote compromise of affected computers.
Exploit / POC
Apple QuickTime Multiple Overflow and Exception Vulnerabilities
Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
A proof-of-concept exploit is available for the FLC file heap-based buffer-overflow issue.
Currently we are not aware of any exploits for these issues. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected]
A proof-of-concept exploit is available for the FLC file heap-based buffer-overflow issue.
Solution / Fix
Apple QuickTime Multiple Overflow and Exception Vulnerabilities
Solution:
The vendor has released QuickTime version 7.1.3 to address these issues.
Please see the referenced advisories for more information.
Apple QuickTime Player 7.1
Apple QuickTime Player 6
Apple QuickTime Player 5.0.2
Apple QuickTime Player 6.1
Apple QuickTime Player 6.5
Apple QuickTime Player 6.5.1
Apple QuickTime Player 6.5.2
Apple QuickTime Player 7.0
Apple QuickTime Player 7.0.1
Apple QuickTime Player 7.0.2
Apple QuickTime Player 7.0.3
Apple QuickTime Player 7.0.4
Solution:
The vendor has released QuickTime version 7.1.3 to address these issues.
Please see the referenced advisories for more information.
Apple QuickTime Player 7.1
-
Apple iTunesSetup.exe
QuickTime 7.1.3 with iTunes for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstaller.exe
QuickTime 7.1.3 for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstallerX.dmg
For Mac OS X v10.3.9 or later
http://www.apple.com/quicktime/
Apple QuickTime Player 6
-
Apple iTunesSetup.exe
QuickTime 7.1.3 with iTunes for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstaller.exe
QuickTime 7.1.3 for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstallerX.dmg
For Mac OS X v10.3.9 or later
http://www.apple.com/quicktime/
Apple QuickTime Player 5.0.2
-
Apple iTunesSetup.exe
QuickTime 7.1.3 with iTunes for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstaller.exe
QuickTime 7.1.3 for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstallerX.dmg
For Mac OS X v10.3.9 or later
http://www.apple.com/quicktime/
Apple QuickTime Player 6.1
-
Apple iTunesSetup.exe
QuickTime 7.1.3 with iTunes for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstaller.exe
QuickTime 7.1.3 for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstallerX.dmg
For Mac OS X v10.3.9 or later
http://www.apple.com/quicktime/
Apple QuickTime Player 6.5
-
Apple iTunesSetup.exe
QuickTime 7.1.3 with iTunes for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstaller.exe
QuickTime 7.1.3 for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstallerX.dmg
For Mac OS X v10.3.9 or later
http://www.apple.com/quicktime/
Apple QuickTime Player 6.5.1
-
Apple iTunesSetup.exe
QuickTime 7.1.3 with iTunes for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstaller.exe
QuickTime 7.1.3 for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstallerX.dmg
For Mac OS X v10.3.9 or later
http://www.apple.com/quicktime/
Apple QuickTime Player 6.5.2
-
Apple iTunesSetup.exe
QuickTime 7.1.3 with iTunes for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstaller.exe
QuickTime 7.1.3 for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstallerX.dmg
For Mac OS X v10.3.9 or later
http://www.apple.com/quicktime/
Apple QuickTime Player 7.0
-
Apple iTunesSetup.exe
QuickTime 7.1.3 with iTunes for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstaller.exe
QuickTime 7.1.3 for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstallerX.dmg
For Mac OS X v10.3.9 or later
http://www.apple.com/quicktime/
Apple QuickTime Player 7.0.1
-
Apple iTunesSetup.exe
QuickTime 7.1.3 with iTunes for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstaller.exe
QuickTime 7.1.3 for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstallerX.dmg
For Mac OS X v10.3.9 or later
http://www.apple.com/quicktime/
Apple QuickTime Player 7.0.2
-
Apple iTunesSetup.exe
QuickTime 7.1.3 with iTunes for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstaller.exe
QuickTime 7.1.3 for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstallerX.dmg
For Mac OS X v10.3.9 or later
http://www.apple.com/quicktime/
Apple QuickTime Player 7.0.3
-
Apple iTunesSetup.exe
QuickTime 7.1.3 with iTunes for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstaller.exe
QuickTime 7.1.3 for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstallerX.dmg
For Mac OS X v10.3.9 or later
http://www.apple.com/quicktime/
Apple QuickTime Player 7.0.4
-
Apple iTunesSetup.exe
QuickTime 7.1.3 with iTunes for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstaller.exe
QuickTime 7.1.3 for Windows 2000/XP
http://www.apple.com/quicktime/ -
Apple QuickTimeInstallerX.dmg
For Mac OS X v10.3.9 or later
http://www.apple.com/quicktime/
References
Apple QuickTime Multiple Overflow and Exception Vulnerabilities
References:
References:
- Apple QuickTime Homepage (Apple)
- Apple QuickTime Player H.264 Codec Remote Integer Overflow (Piotr Bania)
- Vulnerability Note VU#200316 - Apple QuickTime vulnerable to denial of service v (US-CERT)
- Vulnerability Note VU#308204 - Apple QuickTime fails to properly handle SGI imag (US-CERT)
- Vulnerability Note VU#540348 - Apple QuickTime fails to properly handle FlashPix (US-CERT)
- Vulnerability Note VU#554252 - Apple QuickTime Player H.264 Codec contains an in (US-CERT)
- Vulnerability Note VU#683700 - Apple QuickTime movie buffer overflow vulnerabili (US-CERT)
- Apple QuickTime H.264 Integer Overflow Vulnerability (Sowhat
- iDefense Security Advisory 09.12.06: Apple QuickTime FLIC File Heap Overflow Vul (iDefense)
- Multiple Vulnerabilities in Apple QuickTime (McAfee Avert)