RETIRED: Apple QuickTime Multiple Arbitrary Code Execution Vulnerabilities
BID:29619
Info
RETIRED: Apple QuickTime Multiple Arbitrary Code Execution Vulnerabilities
| Bugtraq ID: | 29619 |
| Class: | Unknown |
| CVE: |
CVE-2008-1581 CVE-2008-1582 CVE-2008-1583 CVE-2008-1584 CVE-2008-1585 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 10 2008 12:00AM |
| Updated: | Jun 11 2008 05:22PM |
| Credit: | Dyon Balding of Secunia Research, Dave Soldera of NGS Software, Jens Alfke, Liam O Murchu of Symantec, TippingPoint's Zero Day Initiative, Vinoo Thomas and Rahul Mohandas of McAfee Avert Labs, Petko D. (pdp) Petkov of GNUCITIZEN and anonymous researchers. |
| Vulnerable: |
Apple QuickTime Player 7.4.5 Apple QuickTime Player 7.4.1 Apple QuickTime Player 7.3.1 .70 Apple QuickTime Player 7.3.1 Apple QuickTime Player 7.1.6 Apple QuickTime Player 7.1.5 Apple QuickTime Player 7.1.4 Apple QuickTime Player 7.1.3 Apple QuickTime Player 7.1.2 Apple QuickTime Player 7.1.1 Apple QuickTime Player 7.0.4 Apple QuickTime Player 7.0.3 Apple QuickTime Player 7.0.2 Apple QuickTime Player 7.0.1 Apple QuickTime Player 7.4 Apple QuickTime Player 7.4 Apple QuickTime Player 7.3 Apple QuickTime Player 7.2 Apple QuickTime Player 7.1 |
| Not Vulnerable: |
Apple QuickTime Player 7.5 |
Discussion
RETIRED: Apple QuickTime Multiple Arbitrary Code Execution Vulnerabilities
Apple QuickTime is prone to multiple remote vulnerabilities that may allow remote attackers to execute arbitrary code.
These issues arise when the application handles specially crafted PICT image files, Indeo video content, movie files, 'file:' URIs, and AAC-encoded media. Successful exploits may allow attackers to gain remote unauthorized access in the context of a vulnerable user; failed exploits will cause denial-of-service conditions.
Versions prior to QuickTime 7.5 are affected.
NOTE: This BID is being retired; the following individual records have been created to better document the issues:
29649 Apple QuickTime 'PICT' Image 'PixData' Structures Handling Heap Overflow Vulnerability
29650 Apple QuickTime 'file:' URI File Execution Vulnerability
29654 Apple QuickTime 'AAC-encoded' Media Memory Corruption Vulnerability
29648 Apple QuickTime 'PICT' Image Buffer Overflow Vulnerability
29652 Apple QuickTime Indo Video Codec Buffer Overflow Vulnerability
Apple QuickTime is prone to multiple remote vulnerabilities that may allow remote attackers to execute arbitrary code.
These issues arise when the application handles specially crafted PICT image files, Indeo video content, movie files, 'file:' URIs, and AAC-encoded media. Successful exploits may allow attackers to gain remote unauthorized access in the context of a vulnerable user; failed exploits will cause denial-of-service conditions.
Versions prior to QuickTime 7.5 are affected.
NOTE: This BID is being retired; the following individual records have been created to better document the issues:
29649 Apple QuickTime 'PICT' Image 'PixData' Structures Handling Heap Overflow Vulnerability
29650 Apple QuickTime 'file:' URI File Execution Vulnerability
29654 Apple QuickTime 'AAC-encoded' Media Memory Corruption Vulnerability
29648 Apple QuickTime 'PICT' Image Buffer Overflow Vulnerability
29652 Apple QuickTime Indo Video Codec Buffer Overflow Vulnerability
Exploit / POC
RETIRED: Apple QuickTime Multiple Arbitrary Code Execution Vulnerabilities
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
RETIRED: Apple QuickTime Multiple Arbitrary Code Execution Vulnerabilities
Solution:
The vendor has released an advisory and fixes. Please see the references for more information.
Solution:
The vendor has released an advisory and fixes. Please see the references for more information.
References
RETIRED: Apple QuickTime Multiple Arbitrary Code Execution Vulnerabilities
References:
References:
- Apple QuickTime Homepage (Apple)
- Secunia Research: Apple QuickTime PICT Image Parsing Buffer Overflow (Secunia Research
- ZDI-08-037: Apple QuickTime Indeo Video Buffer Overflow Vulnerability ([email protected])
- ZDI-08-038: QuickTime SMIL qtnext Redirect File Execution ([email protected])
- HT1991: About the security content of QuickTime 7.5 (Apple)
- Secunia Research: Apple QuickTime PICT Image Parsing Buffer Overflow (Secunia Research)
- VU#132419 Apple QuickTime "file: URL" arbitrary code execution (US-CERT)
- ZDI-08-037: Apple QuickTime Indeo Video Buffer Overflow Vulnerability (Zero Day Initiative)
- ZDI-08-038: QuickTime SMIL qtnext Redirect File Execution (Zero Day Initiative)