PT-2004-1568 · Apple · Apple Quicktime

Derek Soeder + 1 · Publicado 2004-05-06 · Atualizado 2017-07-11 · CVE-2004-0431

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple QuickTime version 6.5 and earlier

Description The issue is related to an integer overflow in the sample-to-chunk table data for a .mov movie file. This occurs when a large "number of entries" field is encountered, leading to a heap-based buffer overflow. This can allow attackers to execute arbitrary code.

Recommendations For Apple QuickTime version 6.5 and earlier, update to version 6.5.1 or later to resolve the issue.

Correção

Identificadores relacionados

CVE-2004-0431

Produtos afetados

Apple Quicktime

Referências · 6

• http://marc.info/?l=bugtraq&m=108360110618389&w=2 · Nota
• http://kb.cert.org/vuls/id/782958 · Nota
• http://marc.info/?l=ntbugtraq&m=108356485013237&w=2 · Nota
• http://lists.apple.com/mhonarc/security-announce/msg00048.html · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2004-0431 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16026 · Nota