Signature Detail
This site is deprecated. Please CLICK HERE for latest updates
Short Name |
HTTP:STC:DL:APPLE-QT-TEXML |
|---|---|
Severity |
Major |
Recommended |
No |
Recommended Action |
Drop |
Category |
HTTP |
Keywords |
Apple QuickTime TeXML Style Element Text Specification Buffer Overflow |
Release Date |
2013/01/07 |
Update Number |
2222 |
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+ |
HTTP: Apple QuickTime TeXML Style Element Text Specification Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the Apple QuickTime. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the application.
Extended Description
Buffer overflow in Apple QuickTime before 7.7.3 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via a crafted transform attribute in a text3GTrack element in a QuickTime TeXML file.
Affected Products
- Apple quicktime 3.0
- Apple quicktime 4.1.2
- Apple quicktime 5.0
- Apple quicktime 5.0.1
- Apple quicktime 5.0.2
- Apple quicktime 6.0
- Apple quicktime 6.0.0
- Apple quicktime 6.0.1
- Apple quicktime 6.0.2
- Apple quicktime 6.1
- Apple quicktime 6.1.1
- Apple quicktime 6.2.0
- Apple quicktime 6.3.0
- Apple quicktime 6.4.0
- Apple quicktime 6.5
- Apple quicktime 6.5.0
- Apple quicktime 6.5.1
- Apple quicktime 6.5.2
- Apple quicktime 7.0.0
- Apple quicktime 7.0.1
- Apple quicktime 7.0.2
- Apple quicktime 7.0.3
- Apple quicktime 7.0.4
- Apple quicktime 7.1.0
- Apple quicktime 7.1.1
- Apple quicktime 7.1.2
- Apple quicktime 7.1.3
- Apple quicktime 7.1.4
- Apple quicktime 7.1.5
- Apple quicktime 7.1.6
- Apple quicktime 7.2.0
- Apple quicktime 7.2.1
- Apple quicktime 7.3.0
- Apple quicktime 7.3.1
- Apple quicktime 7.3.1.70
- Apple quicktime 7.4.0
- Apple quicktime 7.4.1
- Apple quicktime 7.4.5
- Apple quicktime 7.5.0
- Apple quicktime 7.5.5
- Apple quicktime 7.6.0
- Apple quicktime 7.6.1
- Apple quicktime 7.6.2
- Apple quicktime 7.6.5
- Apple quicktime 7.6.6
- Apple quicktime 7.6.7
- Apple quicktime 7.6.8
- Apple quicktime 7.6.9
- Apple quicktime 7.7.0
- Apple quicktime 7.7.1
- Apple quicktime 7.7.2
References
- BugTraq: 56557
- CVE: CVE-2012-3752
- CVE: CVE-2012-3758