PT-2003-2046 · Apple · Apple Quicktime/Darwin Streaming Server

Sir Mordred · Publicado 2003-12-31 · Atualizado 2017-07-11 · CVE-2003-1091

Positive Technologies (AI Summary)

CVSS v2.0

7.5

Alta

Vetor base

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple QuickTime/Darwin Streaming Server version 4.1.3

Description The issue is related to an integer overflow in MP3Broadcaster, which can be triggered by remote attackers sending malformed ID3 tags in MP3 files. This can cause a denial of service (crash) and potentially allow the execution of arbitrary code.

Recommendations For Apple QuickTime/Darwin Streaming Server version 4.1.3, consider updating to a newer version that addresses this issue, as no specific workaround is provided for this version.

Exploit

Correção

Identificadores relacionados

CVE-2003-1091

Produtos afetados

Apple Quicktime/Darwin Streaming Server

Referências · 7

• 🔥 http://securitytracker.com/id?1006822 · Exploit
• 🔥 http://archives.neohapsis.com/archives/bugtraq/2003-05/0245.html · Exploit
• 🔥 https://exploit-db.com/exploits/22630 · Exploit
• 🔥 http://securityfocus.com/bid/7660 · Exploit
• https://exchange.xforce.ibmcloud.com/vulnerabilities/12054 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2003-1091 · Nota de Segurança
• http://kb.cert.org/vuls/id/148564 · Nota