PT-2005-3635 · Apple · Apple Quicktime

Piotr Bania · Publicado 2005-11-05 · Atualizado 2018-10-19 · CVE-2005-2753

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Média

Vetor base

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.0.3

Description The issue allows user-assisted attackers to execute arbitrary code via a crafted MOV file. This is due to an integer overflow caused by the sign extension of the length element in a Pascal style string. A remote overflow exists in Quicktime, where the program fails to validate movie files, resulting in an integer overflow. With a specially crafted file containing an embedded "Pascal" style string, an attacker can cause a very large memory copy leading to remote code execution, resulting in a loss of integrity.

Recommendations For Apple QuickTime versions prior to 7.0.3, update to version 7.0.3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted MOV files that contain "Pascal" style strings until a patch is applied. Restrict access to untrusted movie files to minimize the risk of exploitation.

Correção

RCE

Enumeração de Fraquezas

CWE-189

Identificadores relacionados

CVE-2005-2753

Produtos afetados

Apple Quicktime

Referências · 11

• http://osvdb.org/20475 · Correção
• http://docs.info.apple.com/article.html?artnum=302772 · Nota
• http://frsirt.com/english/advisories/2005/2293 · Nota
• http://securityfocus.com/archive/1/415712/30/0/threaded · Nota
• http://securityfocus.com/archive/1/archive/1/415712/30/0/threaded · Nota
• http://securityfocus.com/bid/15306 · Nota
• http://secunia.com/advisories/17428 · Aviso do Fabricante
• https://nvd.nist.gov/vuln/detail/CVE-2005-2753 · Nota de Segurança
• http://securitytracker.com/id?1015152 · Aviso do Fabricante
• http://vupen.com/english/advisories/2005/2293 · Aviso do Fabricante
• http://pb.specialised.info/all/adv/quicktime-mov-io1-adv.txt · Aviso do Fabricante