Multiple products Unspecified Library MP4 File Remote Denial of Service Vulnerability
BID:31957
Info
Multiple products Unspecified Library MP4 File Remote Denial of Service Vulnerability
| Bugtraq ID: | 31957 |
| Class: | Unknown |
| CVE: | |
| Remote: | Yes |
| Local: | No |
| Published: | Oct 28 2008 12:00AM |
| Updated: | Nov 05 2008 05:55PM |
| Credit: | [email protected] |
| Vulnerable: |
VideoLAN VLC media player 0.9.4 VideoLAN VLC media player 0.9.3 VideoLAN VLC media player 0.9.2 VideoLAN VLC media player 0.9.1 VideoLAN VLC media player 0.9 VideoLAN VLC media player 0.8.6 i VideoLAN VLC media player 0.8.6 h VideoLAN VLC media player 0.8.6 g VideoLAN VLC media player 0.8.6 d VideoLAN VLC media player 0.8.6 VideoLAN VLC media player 0.8.6f VideoLAN VLC media player 0.8.6e VideoLAN VLC media player 0.8.6c VideoLAN VLC media player 0.8.6b VideoLAN VLC media player 0.8.6a Apple iPod Touch 2.0.2 Apple iPod Touch 2.0.1 Apple iPod Touch 1.1.4 Apple iPod Touch 1.1.3 Apple iPod Touch 1.1.2 Apple iPod Touch 1.1.1 Apple iPod Touch 2.1 Apple iPod Touch 2.0 Apple iPod Touch 1.1 Apple iPod Touch 0 Apple iPhone 2.0.2 Apple iPhone 2.0.1 Apple iPhone 1.1.4 Apple iPhone 1.1.3 Apple iPhone 1.1.2 Apple iPhone 1.1.1 Apple iPhone 1.0.2 Apple iPhone 1.0.1 Apple iPhone 2.1 Apple iPhone 2.0 Apple iPhone 1.1 |
| Not Vulnerable: | |
Discussion
Multiple products Unspecified Library MP4 File Remote Denial of Service Vulnerability
Multiple phone and video products are prone to a denial-of-service vulnerability that occurs in an unspecified library.
Successful exploits may allow remote attackers to cause denial-of-service conditions on computers or devices running the affected library.
The following products are vulnerable:
Apple iPhone
Apple iPod touch
VideoLan VLC
Other products may also be affected.
Multiple phone and video products are prone to a denial-of-service vulnerability that occurs in an unspecified library.
Successful exploits may allow remote attackers to cause denial-of-service conditions on computers or devices running the affected library.
The following products are vulnerable:
Apple iPhone
Apple iPod touch
VideoLan VLC
Other products may also be affected.
Exploit / POC
Multiple products Unspecified Library MP4 File Remote Denial of Service Vulnerability
An attacker can exploit this issue by enticing an unsuspecting victim to view a malicious MP4 file.
The following proof-of-concept video will crash Apple iPhone:
http://www.ziphone.org/2008/11/boom.html
An attacker can exploit this issue by enticing an unsuspecting victim to view a malicious MP4 file.
The following proof-of-concept video will crash Apple iPhone:
http://www.ziphone.org/2008/11/boom.html
Solution / Fix
Multiple products Unspecified Library MP4 File Remote Denial of Service Vulnerability
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
Solution:
Currently we are not aware of any vendor-supplied patches. If you feel we are in error or if you are aware of more recent information, please mail us at: [email protected].
References
Multiple products Unspecified Library MP4 File Remote Denial of Service Vulnerability
References:
References: