Signature Detail

HTTP: Apple QuickTime '.m3u' File Remote Stack Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Apple Quicktime. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the client.

Extended Description

Apple QuickTime is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. QuickTime 7.5.x is vulnerable; other versions may also be affected.

Affected Products

• Apple QuickTime Player 7.5
• Apple QuickTime Player 7.5.5

References

• BugTraq: 46799
• URL: http://www.apple.com/quicktime/