|
| Just the facts | ||
| Title | CASEScontact.org advisory - Apple QuickTime Player has buffer and remote integer overflow vulnerability | |
| Description | Highly CRITICAL vulnerability: Vulnerability could be exploited by remote attackers to take complete control of an affected system The impact of this vulnerability could cause:
|
|
| CyTRAP Labs ID | CT110063 | |
| Last update | 2006-09-13 | |
| Original release date | 2006-09-12 | |
| Source | CyTRAP Labs | |
| Systems affected |
Highly critical vulnerability that affects:
Please be aware, QuickTime does not check for updates automatically, you have to trigger the process yourself. |
|
| Version number | 1.1 | |
| ISSN | 1603-9858 | |
| Verify threat | http://casescontact.org/tips/110063 | |
| Risk assessment | High | |
| Impact/Severity | High | |
| Update | 2006-09-13 - go to How do I fix it section below for more help | |
Why not get new tips and alerts by e-mail directly to your in-box? It's much more convenient: |
||
| What is the problem? | ||
| Admin | Why not help us do a better job for you? If you have additional information or corrections for this advisory please submit them via our contact form or by email to: > updates at CASEScontact.org |
|
| How does it affect me? | Should I Worry?
Yes ==> If your PC runs on the Windows Operating System or on the MAC OS and you use Apple QuickTime Player (one of the Apple QuickTime components), please be careful A) The Threat may result in an attacker to take control of the vulnerable system. B) Vulnerability is as follows: a remote integer overflow error. However, to trigger the exploit the user has to be tricked into opening a specially crafted video file (MOV file) C) Impact . Successful exploitation could cause:
|
|
| Systems affected | Vulnerability has been confirmed with:
|
|
| Not affected systems | all others | |
| Minimize your exposure to this threat - follow the steps outlined below | ||
| Much Gain - Little Pain - Do this | Be careful when receiving a MOV file from un-trusted sources or that you receive unexpectedly from trusted sources.
This vulnerability could be exploited when QuickTime opens such a file. |
|
| How do I fix it |
2006-09-13 Vendor response
Vendor released QuickTime 7.1.3 that may be obtained from the Software Update pane in System Preferences, or else you can use the Download tab on the QuickTime site.
Apple-Vendor response CyTRAP Labs is currently unaware of any effective workarounds for the remote exploitation of a heap-based buffer overflow vulnerability in Apple Computer's QuickTime Player 2006-09-12 None available at this time
|
|
| Additional risk minimization | Remember, just do not open files from people you neither know or do not expect to get a file, regardless what program or file extension the attachment might have. | |
| If you need more information, please read on. Otherwise follow the steps outlined above. | ||
| Source | Piotr Bania | |
| Source URL | http://piotrbania.com/all/adv/quicktime-integer-overflow-h264-adv-7.1.txt | |
| Source date | 2006-09-12 | |
| More information | 2006-09-12 Piotr Bania released information on Web and on various security lists | |
| CVE | CVE-2006-4381, CVE-2006-4382, CVE-2006-4384, CVE-2006-4385, CVE-2006-4386, CVE-2006-4388, CVE-2006-4389 | |
| CyTRAP labs ID | CT110063 | |
| Administrative | ||
| Author | Urs E. Gattiker - CyTRAP Labs | |
| Revisions | ||
| Contact details | Web: http://CASEScontact.org E-mail: support01 at CASEScontact.org Tel: +41(0)76-200-7778 or + 44(0)70-9237-6036 Fax: +44(0)70-9237-6036, dial 3 send fax |
|
|
--END of ADVISORY - Important Info Below-- | |
 | |
| We recommend that you VERIFY ALL ADVISORIES you receive IMMEDIATELY, by clicking on the link provided at the top of this alert. |
|
| |
NO WARRANTY Any material furnished by CASEScontact.org is furnished on an 'as is' basis. CASEScontact.org, writers & sponsors make no warranties of any kind, either expressed or implied as to any matter including, but not limited to, warranty of fitness for a particular purpose or merchantability, exclusivity or results obtained from use of the material. |
|
| |
Ride the rollercoaster successfully by subscribing to our alerts, tips, tools and skills training receiving them either via: 1) e-mail
| |
| |
NO WARRANTY Any material furnished by CASEScontact.org is furnished on an 'as is' basis. CASEScontact.org, writers & sponsors make no warranties of any kind, either expressed or implied as to any matter including, but not limited to, warranty of fitness for a particular purpose or merchantability, exclusivity or results obtained from use of the material. |
|
| |
CASES writers & sponsors do not make any warranty of any kind with respect to freedom from patent, trademark, or copyright infringement. Full DISCLAIMER notice at: http://www.casescontact.org/terms.php |
|
| |
UNSUBSCRIBE If you no longer wish to receive this THREAT ALERT, please Unsubscribe at: http://www.casescontact.org/unsubscribe.php QUESTIONS, comments, ideas? Cheer us up at:Alerts-Comments at CASEScontact.org CASEScontact.org -- Threat Alerts and Security Notices --clear and precise, no compromise - |
|
| |
-- END of THREAT ALERT -- Copyright (c) 2007 by CyTRAP labs - Urs E. Gattiker. All rights reserved. | |