Signature Detail

HTTP: Apple QuickTime FLIC Animation File Buffer Overflow

This signature detects attempts to exploit a known vulnerability in QuickTime FLIC Animation File handling function. A successful attack could allow the attacker to execute arbitrary code on the targeted system. Failed exploit attempts could result in a denial of service condition.

Extended Description

Apple QuickTime is prone to multiple vulnerabilities because it fails to properly bounds-check and sanitize user-supplied data. An attacker can exploit these issues to execute arbitrary code in the context of the victim user running the vulnerable application. Successful exploits may facilitate a remote compromise of affected computers.

Affected Products

• Apple QuickTime Player 5.0.2
• Apple QuickTime Player 6
• Apple QuickTime Player 6.1.0
• Apple QuickTime Player 6.5.0
• Apple QuickTime Player 6.5.1
• Apple QuickTime Player 6.5.2
• Apple QuickTime Player 7.0.0
• Apple QuickTime Player 7.0.1
• Apple QuickTime Player 7.0.2
• Apple QuickTime Player 7.0.3
• Apple QuickTime Player 7.0.4
• Apple QuickTime Player 7.1
• Apple QuickTime Player 7.1.1
• Apple QuickTime Player 7.1.2
• Gentoo Linux
• Gentoo media-libs/win32codecs 20071007-r2

References

• BugTraq: 19976
• CVE: CVE-2006-4384