PT-2005-2558 · Apple · Quicktime Player+2

David Remahl · Published 2005-05-12 · Updated 2011-03-08 · CVE-2005-1579

Positive Technologies (AI Summary)

CVSS v2.0

5.0

Medium

Base vector

AV:N/AC:L/Au:N/C:P/I:N/A:N

Name of the Vulnerable Software and Affected Versions Apple QuickTime Player version 7.0 on Mac OS X 10.4

Description The issue allows remote attackers to obtain sensitive information via a .mov file with a Quartz Composer composition (.qtz) file. This is possible because compositions created with an advanced set of tools, called patches, can be embedded within the file to trigger the issue. By combining patches that provide advanced system information with patches that load information from the Internet, it is possible for a remote attacker to create a malicious *.qtz or *.mov file. This file would disclose sensitive information to a malicious server once the victim views the file, for example, in a web browser with the QuickTime plugin.

Recommendations For Apple QuickTime Player version 7.0 on Mac OS X 10.4, consider disabling the use of Quartz Composer files (*.qtz) as a temporary workaround until a patch is available. Restrict access to compositions created with the Quartz Composer application to minimize the risk of exploitation. Avoid viewing suspicious .mov files, especially those containing Quartz Composer compositions, in a web browser with the QuickTime plugin.

Fix

Related Identifiers

CVE-2005-1579

Affected Products

Macos X

Quartz Composer

Quicktime Player

References · 13

• http://remahl.se/david/vuln/018 · Vendor Advisory
• http://osvdb.org/16376 · Vendor Advisory
• http://securityfocus.com/bid/13603 · Vendor Advisory
• http://archives.neohapsis.com/archives/fulldisclosure/2005-05/0265.html · Vendor Advisory
• http://lists.apple.com/archives/quartzcomposer-dev/2005/May/msg00263.html · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-1579 · Security Note
• http://lists.apple.com/archives/quartzcomposer-dev/2005/May/msg00250.html · Vendor Advisory
• http://securitytracker.com/id?1013961 · Vendor Advisory
• http://secunia.com/advisories/15307 · Vendor Advisory
• http://lists.apple.com/archives/security-announce/2005/May/msg00006.html · Vendor Advisory
• http://vupen.com/english/advisories/2005/0531 · Note
• http://frsirt.com/english/advisories/2005/0531 · Note
• http://docs.info.apple.com/article.html?artnum=301714 · Note