A remote overflow exists in the Mac OS X default handler for files with a '.bmp' extension. The 'ReadBMP' function fails to properly validate input, resulting in a heap overflow. With a specially crafted file, an attacker can cause the applicaton to crash and potentially execute arbitrary code on the victim's system, resulting in a loss of integrity.

Upgrade to QuickTime version 7.1 or higher, as it has been reported to fix this vulnerability. A seperate upgrade may be required to address other components of the operating system.

• Secunia Advisory ID: 19686 20069
• CVE ID: 2006-2238 (see also: NVD)
• Related OSVDB ID: 24819 24821 24822 24823 25508 25509 25510 25511 25512 25513 25514 25515 25516 25517
• Vendor Specific Advisory URL: http://docs.info.apple.com/article.html?artnum=303752
• Vendor URL: http://www.apple.com/macosx/
• Other Advisory URL: http://www.security-protocols.com/sp-x27-advisory.php

• Tom Ferris - tommysecurity-protocols.com - Security-Protocols