Signature Detail

HTTP: Apple QuickTime PDAT Atom Parsing Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Apple Quicktime. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the application.

Extended Description

Apple QuickTime is prone to multiple remote vulnerabilities that may allow remote attackers to execute arbitrary code and carry out denial-of-service attacks. These issues arise when the application handles specially crafted PICT image files, movies, and QTVR movies. Successful exploits may allow attackers to gain remote unauthorized access in the context of a vulnerable user and to trigger a denial-of-service condition. Versions prior to QuickTime 7.5.5 are affected. NOTE: Two issues that were previously covered in this BID were given their own records to better document the details: - CVE-2008-3626 was moved to BID 31546 ('Apple QuickTime 'STSZ' Atoms Memory Corruption Vulnerability') - CVE-2008-3629 was moved to BID 31548 ('Apple QuickTime PICT Denial of Service Vulnerability').

Affected Products

• Apple mac_os_x 10.4.1
• Apple mac_os_x 10.4.10
• Apple mac_os_x 10.4.11
• Apple mac_os_x 10.4.2
• Apple mac_os_x 10.4.3
• Apple mac_os_x 10.4.4
• Apple mac_os_x 10.4.5
• Apple mac_os_x 10.4.6
• Apple mac_os_x 10.4.7
• Apple mac_os_x 10.4.8
• Apple mac_os_x 10.4.9
• Apple mac_os_x 10.5
• Apple mac_os_x 10.5.1
• Apple mac_os_x 10.5.2
• Apple mac_os_x 10.5.3
• Apple mac_os_x 10.5.4
• Apple mac_os_x_server 10.4.0
• Apple mac_os_x_server 10.4.1
• Apple mac_os_x_server 10.4.10
• Apple mac_os_x_server 10.4.11
• Apple mac_os_x_server 10.4.2
• Apple mac_os_x_server 10.4.3
• Apple mac_os_x_server 10.4.4
• Apple mac_os_x_server 10.4.5
• Apple mac_os_x_server 10.4.6
• Apple mac_os_x_server 10.4.7
• Apple mac_os_x_server 10.4.8
• Apple mac_os_x_server 10.4.9
• Apple mac_os_x_server 10.5
• Apple mac_os_x_server 10.5.1
• Apple mac_os_x_server 10.5.2
• Apple mac_os_x_server 10.5.3
• Apple mac_os_x_server 10.5.4
• Apple quicktime_player 7.0.0
• Apple quicktime_player 7.0.1
• Apple quicktime_player 7.0.2
• Apple quicktime_player 7.0.3
• Apple quicktime_player 7.0.4
• Apple quicktime_player 7.1
• Apple quicktime_player 7.1.1
• Apple quicktime_player 7.1.2
• Apple quicktime_player 7.1.3
• Apple quicktime_player 7.1.4
• Apple quicktime_player 7.1.5
• Apple quicktime_player 7.1.6
• Apple quicktime_player 7.2
• Apple quicktime_player 7.3
• Apple quicktime_player 7.3.1
• Apple quicktime_player 7.3.1.70
• Apple quicktime_player 7.4
• Apple quicktime_player 7.4.1
• Apple quicktime_player 7.4.5
• Apple quicktime_player 7.5

References

• BugTraq: 31086
• CVE: CVE-2008-3625