OSVDB ID: 35574

Title: Apple QuickTime Movie Sample Table Sample Descriptor (STSD) Parsing Overflow

Info

Disclosure

May 10, 2007

Discovery

Jan 31, 2006

Dates

Exploit

Unknown

Solution

Unknown

Description

A heap corruption overflow exists in Quicktime. It fails to validate Sample Table Sample Descriptor (STSD) atoms resulting in heap corruption. With a specially crafted file, an attacker can cause arbitrary code execution resulting in a loss of integrity.

Classification

Location: Remote / Network Access
Attack Type: Input Manipulation
Impact: Loss of Integrity
Exploit: Exploit Unknown
Disclosure: OSVDB Verified, Vendor Verified

Solution

Upgrade to version 7.1.3 or higher, as it has been reported to fix this vulnerability. An upgrade is required as there are no known workarounds.

Products

Apple Computer, Inc.

QuickTime

7.1.2

References

CVE ID: 2007-0754 (see also: NVD)
Bugtraq ID: 23923
ISS X-Force ID: 34244
Mail List Post: http://archives.neohapsis.com/archives/bugtraq/2007-05/0171.html
Vendor Specific News/Changelog Entry: http://docs.info.apple.com/article.html?artnum=304357
Other Advisory URL: http://dvlabs.tippingpoint.com/advisory/TPTI-07-07

Credit

Ganesh Devarajan - TippingPoint DVLabs

Direct URL: http://osvdb.org/35574