This site is deprecated. Please
CLICK HERE for latest updates
Short Name |
HTTP:STC:DL:QT-FLASHPIX-BOF
|
Severity |
Major
|
Recommended |
No
|
Recommended Action |
Drop
|
Category |
HTTP
|
Keywords |
QuickTime FlashPix File Buffer Overflow
|
Release Date |
2010/10/01
|
Update Number |
1784
|
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+
|
HTTP: QuickTime FlashPix File Buffer Overflow
This signature detects attempts to exploit a known vulnerability in Apple QuickTime. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the client.
Extended Description
Apple QuickTime is prone to multiple vulnerabilities that may allow remote attackers to execute arbitrary code.
These issues arise when the application handles specially crafted H.264, MPEG-4, and FlashPix video files. Successful exploits may allow attackers to execute arbitrary code in the context of the currently logged-in user; failed exploit attempts will cause denial-of-service conditions.
Versions prior to QuickTime 7.6.4 are vulnerable on Windows 7, Vista, XP, and Mac OS X platforms.
Affected Products
- Apple mac_os_x 10.6
- Apple mac_os_x 10.6.1
- Apple mac_os_x_server 10.6
- Apple mac_os_x_server 10.6.1
- Apple quicktime 7.2
- Apple quicktime_player 5.0.2
- Apple quicktime_player 6
- Apple quicktime_player 6.1.0
- Apple quicktime_player 6.4
- Apple quicktime_player 6.5.0
- Apple quicktime_player 6.5.1
- Apple quicktime_player 6.5.2
- Apple quicktime_player 7.0.0
- Apple quicktime_player 7.0.1
- Apple quicktime_player 7.0.2
- Apple quicktime_player 7.0.3
- Apple quicktime_player 7.0.4
- Apple quicktime_player 7.1
- Apple quicktime_player 7.1.1
- Apple quicktime_player 7.1.2
- Apple quicktime_player 7.1.3
- Apple quicktime_player 7.1.4
- Apple quicktime_player 7.1.5
- Apple quicktime_player 7.1.6
- Apple quicktime_player 7.2
- Apple quicktime_player 7.3
- Apple quicktime_player 7.3.1
- Apple quicktime_player 7.3.1.70
- Apple quicktime_player 7.4
- Apple quicktime_player 7.4.1
- Apple quicktime_player 7.4.5
- Apple quicktime_player 7.5
- Apple quicktime_player 7.5.5
- Apple quicktime_player 7.6
- Apple quicktime_player 7.6.1
- Apple quicktime_player 7.6.2
References