Juniper Networks
Solutions
Products & Services
Company
Partners
Support
Education

Signature Detail

Security Intelligence Center
Signatures
Print

This site is deprecated. Please CLICK HERE for latest updates

Short Name

HTTP:STC:DL:APPLE-QT-H264-OF

Severity

Major

Recommended

No

Recommended Action

Drop

Category

HTTP

Keywords

Apple QuickTime H.264 Movie File Buffer Overflow

Release Date

2011/06/27

Update Number

1945

Supported Platforms

idp-4.0+, isg-3.0+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+

HTTP: Apple QuickTime H.264 Movie File Buffer Overflow


This signature detects attempts to exploit a known vulnerability in the Mov file format. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the user.

Extended Description

Apple QuickTime is prone to multiple vulnerabilities that may allow remote attackers to execute arbitrary code. These issues arise when the application handles specially crafted H.264, MPEG-4, and FlashPix video files. Successful exploits may allow attackers to execute arbitrary code in the context of the currently logged-in user; failed exploit attempts will cause denial-of-service conditions. Versions prior to QuickTime 7.6.4 are vulnerable on Windows 7, Vista, XP, and Mac OS X platforms.

Affected Products

  • Apple mac_os_x 10.6
  • Apple mac_os_x 10.6.1
  • Apple mac_os_x_server 10.6
  • Apple mac_os_x_server 10.6.1
  • Apple quicktime 7.2
  • Apple quicktime_player 5.0.2
  • Apple quicktime_player 6
  • Apple quicktime_player 6.1.0
  • Apple quicktime_player 6.4
  • Apple quicktime_player 6.5.0
  • Apple quicktime_player 6.5.1
  • Apple quicktime_player 6.5.2
  • Apple quicktime_player 7.0.0
  • Apple quicktime_player 7.0.1
  • Apple quicktime_player 7.0.2
  • Apple quicktime_player 7.0.3
  • Apple quicktime_player 7.0.4
  • Apple quicktime_player 7.1
  • Apple quicktime_player 7.1.1
  • Apple quicktime_player 7.1.2
  • Apple quicktime_player 7.1.3
  • Apple quicktime_player 7.1.4
  • Apple quicktime_player 7.1.5
  • Apple quicktime_player 7.1.6
  • Apple quicktime_player 7.2
  • Apple quicktime_player 7.3
  • Apple quicktime_player 7.3.1
  • Apple quicktime_player 7.3.1.70
  • Apple quicktime_player 7.4
  • Apple quicktime_player 7.4.1
  • Apple quicktime_player 7.4.5
  • Apple quicktime_player 7.5
  • Apple quicktime_player 7.5.5
  • Apple quicktime_player 7.6
  • Apple quicktime_player 7.6.1
  • Apple quicktime_player 7.6.2

References

  • BugTraq: 36328
  • CVE: CVE-2009-2799

Site Map
RSS Feeds
Careers
Accessibility
Feedback
Privacy Policy
Legal Notices
Copyright © 1999-2010 Juniper Networks, Inc. All rights reserved.
Help
|
My Account
|
Log Out