Apple QuickTime 'file:' URI File Execution Vulnerability
BID:29650
Info
Apple QuickTime 'file:' URI File Execution Vulnerability
| Bugtraq ID: | 29650 |
| Class: | Design Error |
| CVE: |
CVE-2008-1585 |
| Remote: | Yes |
| Local: | No |
| Published: | Jun 09 2008 12:00AM |
| Updated: | Jun 11 2008 07:32PM |
| Credit: | Vinoo Thomas, Rahul Mohandas, and Petko D. (pdp) Petkov |
| Vulnerable: |
Apple QuickTime Player 7.4.5 Apple QuickTime Player 7.4.1 Apple QuickTime Player 7.3.1 .70 Apple QuickTime Player 7.3.1 Apple QuickTime Player 7.1.6 Apple QuickTime Player 7.1.5 Apple QuickTime Player 7.1.4 Apple QuickTime Player 7.1.3 Apple QuickTime Player 7.1.2 Apple QuickTime Player 7.1.1 Apple QuickTime Player 7.0.4 Apple QuickTime Player 7.0.3 Apple QuickTime Player 7.0.2 Apple QuickTime Player 7.0.1 Apple QuickTime Player 7.0 Apple QuickTime Player 7.4 Apple QuickTime Player 7.4 Apple QuickTime Player 7.3 Apple QuickTime Player 7.2 Apple QuickTime Player 7.1 |
| Not Vulnerable: |
Apple QuickTime Player 7.5 |
Discussion
Apple QuickTime 'file:' URI File Execution Vulnerability
QuickTime is prone to a vulnerability that allows remote attackers to launch arbitrary applications and files. This issue may lead to a remote compromise.
The issue arises because of improper handling of the 'file:' URI.
If an attacker can execute arbitrary malicious code on the computer, they may gain unauthorized remote access in the context of the vulnerable user.
Versions prior to QuickTime 7.5 running on Apple Mac OS X 10.3.9, Mac OS X 10.4.9 to v10.4.11, Mac OS X 10.5 or later, Windows Vista, and Windows XP SP2 are affected.
NOTE: This issue was previously covered in BID 29619 (Apple QuickTime Multiple Arbitrary Code Execution Vulnerabilities) but has been given its own record to better document the vulnerability.
QuickTime is prone to a vulnerability that allows remote attackers to launch arbitrary applications and files. This issue may lead to a remote compromise.
The issue arises because of improper handling of the 'file:' URI.
If an attacker can execute arbitrary malicious code on the computer, they may gain unauthorized remote access in the context of the vulnerable user.
Versions prior to QuickTime 7.5 running on Apple Mac OS X 10.3.9, Mac OS X 10.4.9 to v10.4.11, Mac OS X 10.5 or later, Windows Vista, and Windows XP SP2 are affected.
NOTE: This issue was previously covered in BID 29619 (Apple QuickTime Multiple Arbitrary Code Execution Vulnerabilities) but has been given its own record to better document the vulnerability.
Exploit / POC
Apple QuickTime 'file:' URI File Execution Vulnerability
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Currently we are not aware of any working exploits. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution / Fix
Apple QuickTime 'file:' URI File Execution Vulnerability
Solution:
The vendor has released an advisory and fixes. Please see the references for more information.
Solution:
The vendor has released an advisory and fixes. Please see the references for more information.
References
Apple QuickTime 'file:' URI File Execution Vulnerability
References:
References: