QuickTime Buffer Overflow in Processing MPEG-2 Video with MP3 Audio Lets Remote Users Execute Arbitrary Code
|
|
SecurityTracker Alert ID: 1021625 |
|
SecurityTracker URL: http://securitytracker.com/id/1021625
|
|
CVE Reference:
CVE-2009-0004
(Links to External Site)
|
Date: Jan 22 2009
|
Impact:
Execution of arbitrary code via network, User access via network
|
Fix Available: Yes Vendor Confirmed: Yes
|
Version(s): prior to 7.6
|
Description:
A vulnerability was reported in Apple QuickTime in the processing of MPEG-2 video files with MP3 audio content. A remote user can cause arbitrary code to be executed on the target user's system.
A remote user can create a specially crafted MPEG-2 video file with MP3 audio content that, when loaded by the target user, will trigger a buffer overflow and execute arbitrary code on the target system. The code will run with the privileges of the target user.
Chad Dougherty of the CERT Coordination Center reported this vulnerability.
|
Impact:
A remote user can create a file that, when loaded by the target user, will execute arbitrary code on the target user's system.
|
Solution:
The vendor has issued a fix (7.6), available from the Software Update application, or from the QuickTime Downloads site at:
http://www.apple.com/quicktime/download/
For Mac OS X v10.5 or later
The download file is named: "QuickTime76_Leopard.dmg"
Its SHA-1 digest is: 2b09c606ad381642d3ba34a32aaa6b50c7fc7ce7
For Mac OS X v10.4.9 through Mac OS X v10.4.11
The download file is named: "QuickTime76_Tiger.dmg"
Its SHA-1 digest is: a015254c7277d70f73d2e10d519dff38502db271
For Windows Vista / XP SP2 and SP3
The download file is named: "QuickTimeInstaller.exe"
Its SHA-1 digest is: 5de952ab8a9b7c6b19854592be48942999acf00b
QuickTime with iTunes for Windows 32-bit XP or Vista
The download file is named: "iTunesSetup.exe"
Its SHA-1 digest is: 50c0e31eda9ab0a5902d2242ba2fd74ef5be7c99
QuickTime with iTunes for Windows 64-bit Vista
The download file is named: "iTunes64Setup.exe"
Its SHA-1 digest is: b7a5b654877ddd2d2db8c6fa201000221398bdd9
The vendor's advisory is available at:
http://support.apple.com/kb/HT3403
|
Vendor URL: support.apple.com/kb/HT3403 (Links to External Site)
|
Cause:
Boundary error
|
Underlying OS:
UNIX (OS X), Windows (Vista), Windows (XP)
|
|
Message History:
None.
|
Source Message Contents
|
|
|
[Original Message Not Available for Viewing]
|
|
