PT-2004-1568 · Apple · Apple Quicktime

Derek Soeder + 1 · Published 2004-05-06 · Updated 2017-07-11 · CVE-2004-0431

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple QuickTime version 6.5 and earlier

Description The issue is related to an integer overflow in the sample-to-chunk table data for a .mov movie file. This occurs when a large "number of entries" field is encountered, leading to a heap-based buffer overflow. This can allow attackers to execute arbitrary code.

Recommendations For Apple QuickTime version 6.5 and earlier, update to version 6.5.1 or later to resolve the issue.

Fix

Related Identifiers

CVE-2004-0431

Affected Products

Apple Quicktime

References · 6

• http://lists.apple.com/mhonarc/security-announce/msg00048.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2004-0431 · Security Note
• http://marc.info/?l=bugtraq&m=108360110618389&w=2 · Note
• http://kb.cert.org/vuls/id/782958 · Note
• http://marc.info/?l=ntbugtraq&m=108356485013237&w=2 · Note
• https://exchange.xforce.ibmcloud.com/vulnerabilities/16026 · Note