PT-2005-3635 · Apple · Apple Quicktime

Piotr Bania · Published 2005-11-05 · Updated 2018-10-19 · CVE-2005-2753

Positive Technologies (AI Summary)

CVSS v2.0

5.1

Medium

Base vector

AV:N/AC:H/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions Apple QuickTime versions prior to 7.0.3

Description The issue allows user-assisted attackers to execute arbitrary code via a crafted MOV file. This is due to an integer overflow caused by the sign extension of the length element in a Pascal style string. A remote overflow exists in Quicktime, where the program fails to validate movie files, resulting in an integer overflow. With a specially crafted file containing an embedded "Pascal" style string, an attacker can cause a very large memory copy leading to remote code execution, resulting in a loss of integrity.

Recommendations For Apple QuickTime versions prior to 7.0.3, update to version 7.0.3 or later to resolve the issue. As a temporary workaround, consider avoiding the use of crafted MOV files that contain "Pascal" style strings until a patch is applied. Restrict access to untrusted movie files to minimize the risk of exploitation.

Fix

RCE

Weakness Enumeration

CWE-189

Related Identifiers

CVE-2005-2753

Affected Products

Apple Quicktime

References · 11

• http://osvdb.org/20475 · Patch
• http://secunia.com/advisories/17428 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2005-2753 · Security Note
• http://securitytracker.com/id?1015152 · Vendor Advisory
• http://vupen.com/english/advisories/2005/2293 · Vendor Advisory
• http://pb.specialised.info/all/adv/quicktime-mov-io1-adv.txt · Vendor Advisory
• http://docs.info.apple.com/article.html?artnum=302772 · Note
• http://frsirt.com/english/advisories/2005/2293 · Note
• http://securityfocus.com/archive/1/415712/30/0/threaded · Note
• http://securityfocus.com/archive/1/archive/1/415712/30/0/threaded · Note
• http://securityfocus.com/bid/15306 · Note