CVE-2005-3710

Related Files

FSA-2006-03.txt

Posted Jan 15, 2006

Authored by Dejun Meng

Fortinet Security Advisory - Fortinet Security Research Team (FSRT) has discovered a Denial of Service Vulnerability in the Apple QuickTime Player. Apple QuickTime has a denial of service vulnerability in parsing the specially crafted TIFF image files. This is due to an application failure to sanitize the parameter ImageWidth value while parsing TIFF image files. A remote attacker could construct a web page with a specially crafted tiff file and entice a victim to view it, when the user opens the TIFF image with Internet Explorer or Apple QuickTime Player, it will a cause memory access violation, leading to denial of service.

tags | advisory, remote, web, denial of service

systems | apple

advisories | CVE-2005-3710

SHA-256 | baab435debc09cc8f4dc4ab92b9e3e3b495072880b982fe42813601b6099cba5

Download | Favorite | View

Technical Cyber Security Alert 2006-11A

Posted Jan 15, 2006

Authored by US-CERT | Site us-cert.gov

Technical Cyber Security Alert TA06-011A - Apple has released QuickTime 7.0.4 to correct multiple vulnerabilities. The impacts of these vulnerabilities include execution of arbitrary code and denial of service.

tags | advisory, denial of service, arbitrary, vulnerability

systems | apple

advisories | CVE-2005-4092, CVE-2005-3707, CVE-2005-3710, CVE-2005-3713, CVE-2005-2340

SHA-256 | 0c0b8f8abdfddc63d81776abdf6b6b68c7a274f47f34ee7f05bdec6bf949f506

Download | Favorite | View