This site is deprecated. Please
CLICK HERE for latest updates
Short Name |
HTTP:STC:DL:QUICKTIME-PAINTPOLY
|
Severity |
Major
|
Recommended |
No
|
Recommended Action |
Drop
|
Category |
HTTP
|
Keywords |
Apple QuickTime PICT Image paintPoly Parsing Heap Buffer Overflow
|
Release Date |
2013/04/04
|
Update Number |
2252
|
Supported Platforms |
idp-4.0+, isg-3.1.134269+, j-series-9.5+, mx-11.4+, srx-12.1+, srx-branch-12.1+, vmx-17.4+, vsrx-12.1+, vsrx3bsd-18.2+
|
HTTP: Apple QuickTime PICT Image paintPoly Parsing Heap Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the Apple QuickTime PICT Image paintPoly Parsing. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the application.
Extended Description
Apple Mac OS X is prone to an integer-overflow vulnerability when handling PICT image files.
An attacker can exploit this issue to execute arbitrary code in the context of the victim.
NOTE: This issue was previously covered in BID 34926 (Apple Mac OS X 2009-002 Multiple Security Vulnerabilities), but has been assigned its own record to better document it.
Affected Products
- Apple mac_os_x 10.4.0
- Apple mac_os_x 10.4.1
- Apple mac_os_x 10.4.10
- Apple mac_os_x 10.4.11
- Apple mac_os_x 10.4.2
- Apple mac_os_x 10.4.3
- Apple mac_os_x 10.4.4
- Apple mac_os_x 10.4.5
- Apple mac_os_x 10.4.6
- Apple mac_os_x 10.4.7
- Apple mac_os_x 10.4.8
- Apple mac_os_x 10.4.9
- Apple mac_os_x 10.5
- Apple mac_os_x 10.5.1
- Apple mac_os_x 10.5.2
- Apple mac_os_x 10.5.3
- Apple mac_os_x 10.5.4
- Apple mac_os_x 10.5.5
- Apple mac_os_x 10.5.6
- Apple mac_os_x_server 10.4.0
- Apple mac_os_x_server 10.4.1
- Apple mac_os_x_server 10.4.10
- Apple mac_os_x_server 10.4.11
- Apple mac_os_x_server 10.4.2
- Apple mac_os_x_server 10.4.3
- Apple mac_os_x_server 10.4.4
- Apple mac_os_x_server 10.4.5
- Apple mac_os_x_server 10.4.6
- Apple mac_os_x_server 10.4.7
- Apple mac_os_x_server 10.4.8
- Apple mac_os_x_server 10.4.9
- Apple mac_os_x_server 10.5
- Apple mac_os_x_server 10.5.1
- Apple mac_os_x_server 10.5.2
- Apple mac_os_x_server 10.5.3
- Apple mac_os_x_server 10.5.4
- Apple mac_os_x_server 10.5.5
- Apple mac_os_x_server 10.5.6
- Apple quicktime_player 7.0.0
- Apple quicktime_player 7.0.1
- Apple quicktime_player 7.0.2
- Apple quicktime_player 7.0.3
- Apple quicktime_player 7.0.4
- Apple quicktime_player 7.1
- Apple quicktime_player 7.1.1
- Apple quicktime_player 7.1.2
- Apple quicktime_player 7.1.3
- Apple quicktime_player 7.1.4
- Apple quicktime_player 7.1.5
- Apple quicktime_player 7.1.6
- Apple quicktime_player 7.2
- Apple quicktime_player 7.3
- Apple quicktime_player 7.3.1
- Apple quicktime_player 7.3.1.70
- Apple quicktime_player 7.4
- Apple quicktime_player 7.4.1
- Apple quicktime_player 7.4.5
- Apple quicktime_player 7.5
- Apple quicktime_player 7.5.5
- Apple quicktime_player 7.6
- Apple quicktime_player 7.6.1
References