CVE-2005-2754

Related Files

quicktime-mov-io2-adv.txt

Posted Nov 4, 2005

Authored by Piotr Bania | Site pb.specialised.info

Apple QuickTime Player is reported prone to remote integer overflow vulnerability (exploitable via remotely originated content). Improper movie attributes could result in a very large memory copy, which lead to potential memory overwrite. The vulnerability may lead to remote code execution when specially crafted video file (MOV file) is being loaded. Software affected: QuickTime package 7.0.1 for Mac OS X 10.3, QuickTime package 7.0.1 for Mac OS X 10.4, QuickTime package 6.5.2 for Mac OS X 10.3, QuickTime package 6.5.2 for Mac OS X 10.2, QuickTime package 7x for Windows.

tags | advisory, remote, overflow, code execution

systems | windows, apple, osx

advisories | CVE-2005-2754

SHA-256 | a7fa09ceb9372c03ccbab0386d3205945a1fd05053debe49950536097f029a4d

Download | Favorite | View