PT-2010-1886 · Apple · Apple Quicktime+2

Damian Put

·

Publicado

2010-03-30

·

Atualizado

2018-10-10

·

CVE-2010-0062

CVSS v2.0

6.8

Média

VetorAV:N/AC:M/Au:N/C:P/I:P/A:P
Name of the Vulnerable Software and Affected Versions Apple Mac OS X versions prior to 10.6.3
Description The issue is related to a heap-based buffer overflow in CoreMedia and QuickTime, allowing remote attackers to execute arbitrary code or cause a denial of service via a malformed movie file with H.263 encoding. This can trigger an incorrect buffer length calculation.
Recommendations For Apple Mac OS X versions prior to 10.6.3, update to version 10.6.3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of H.263 encoding in movie files until the update is applied. Restrict access to potentially malicious movie files to minimize the risk of exploitation.

Correção

RCE

DoS

Buffer Overflow

Encontrou algum problema na descrição? Tem algo a acrescentar? Fique à vontade para nos escrever 👾
dbugs@ptsecurity.com

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2010-0062
ZDI-10-036
ZDI-10-068

Produtos afetados

Coremedia
Macos X
Apple Quicktime