PT-2008-1162 · Apple · Apple Quicktime

Attila Suszter · Publicado 2008-12-15 · Atualizado 2018-10-30 · CVE-2009-0001

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.6

Description The issue is related to a heap-based buffer overflow that can be triggered via a crafted RTSP URL, potentially allowing remote attackers to cause a denial of service or execute arbitrary code.

Recommendations For Apple QuickTime versions prior to 7.6, update to version 7.6 or later to resolve the issue.

Correção

DoS

Buffer Overflow

Heap Based Buffer Overflow

Enumeração de Fraquezas

CWE-119

CWE-122

Identificadores relacionados

BDU:2022-04755

CVE-2009-0001

Produtos afetados

Apple Quicktime

Referências · 12

• http://secunia.com/advisories/33632 · Nota
• http://lists.apple.com/archives/security-announce/2009/Jan/msg00000.html · Aviso do Fabricante
• http://vupen.com/english/advisories/2009/0212 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-0001 · Nota de Segurança
• https://exchange.xforce.ibmcloud.com/vulnerabilities/48154 · Nota
• https://vuldb.com/?id.45997 · Nota
• http://securityfocus.com/bid/33385 · Nota
• https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6135 · Nota
• https://bdu.fstec.ru/vul/2022-04755 · Nota de Segurança
• https://vuldb.com/ru/?id.45997 · Nota
• http://support.apple.com/kb/HT3403 · Nota
• http://us-cert.gov/cas/techalerts/TA09-022A.html · Nota