OSVDB ID: 25599

Title: Apple Mac OS X Server QuickTime Server Missing Track DoS

Info

Disclosure

May 08, 2006

Discovery

Unknown

Dates

Exploit

Unknown

Solution

Unknown

Description

Mac OS X contains a flaw that may allow a local denial of service. The issue is triggered when a Quicktime movie with a missing track causes a null pointer dereference, and will result in loss of availability for the Quicktime server.

Classification

Location: Local Access Required
Attack Type: Denial of Service
Impact: Loss of Availability
Exploit: Exploit Unknown
Disclosure: OSVDB Verified

Solution

Install Apple Security Update 2006-003, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Apple Computer, Inc.

Mac OS X Server

10.3.x
10.4
10.4.1
10.4.2
10.4.3
10.4.4
10.4.5
10.4.6

References

Credit

Unknown or Incomplete



Direct URL: http://osvdb.org/25599