Apple QuickTime ActiveX Component Buffer Overrun Vulnerability
BID:5685
Info
Apple QuickTime ActiveX Component Buffer Overrun Vulnerability
| Bugtraq ID: | 5685 |
| Class: | Boundary Condition Error |
| CVE: |
CVE-2002-0376 |
| Remote: | Yes |
| Local: | No |
| Published: | Sep 10 2002 12:00AM |
| Updated: | Mar 27 2008 04:19PM |
| Credit: | Discovered by Ollie Whitehouse <[email protected]>, Andreas Junestam <[email protected]> and Dave Aitel. |
| Vulnerable: |
Apple Quicktime ActiveX Component 5.0.2 |
| Not Vulnerable: |
Apple Quicktime ActiveX Component 6.0 |
Discussion
Apple QuickTime ActiveX Component Buffer Overrun Vulnerability
A vulnerability has been reported in the Apple QuickTime ActiveX component for Internet Explorer. The issue is a buffer-overrun condition that occurs because the software fails to perform adequate boundary checks of supplied arguments. If the component is invoked with the 'pluginspage' argument set to an overly long string value, the overrun will occur.
Successful exploits may allow attacker-supplied instructions to run on affected client systems.
A vulnerability has been reported in the Apple QuickTime ActiveX component for Internet Explorer. The issue is a buffer-overrun condition that occurs because the software fails to perform adequate boundary checks of supplied arguments. If the component is invoked with the 'pluginspage' argument set to an overly long string value, the overrun will occur.
Successful exploits may allow attacker-supplied instructions to run on affected client systems.
Exploit / POC
Apple QuickTime ActiveX Component Buffer Overrun Vulnerability
This issue is currently being exploited in the wild.
This issue is currently being exploited in the wild.
References
Apple QuickTime ActiveX Component Buffer Overrun Vulnerability
References:
References: