Signature Detail

HTTP: Apple QuickTime MPEG Stream Padding Buffer Overflow

This signature detects attempts to exploit a known vulnerability in the Apple QuickTime MPEG Stream. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the server.

Extended Description

Apple Mac OS X is prone to an integer-overflow vulnerability that affects the QuickTime component. Successful exploits may allow attackers to execute arbitrary code in the context of the currently logged-in user; failed exploit attempts may cause denial-of-service conditions. Note: This issue was previously discussed in BID 53445 (Apple Mac OS X Security Update 2012-002 Multiple Security Vulnerabilities) but has been given its own record to better document it.

Affected Products

• Apple Mac Os X 10.6.5
• Apple Mac Os X 10.6.6
• Apple Mac Os X 10.6.7
• Apple Mac Os X 10.6.8
• Apple Mac Os X 10.7
• Apple Mac Os X 10.7.1
• Apple Mac Os X 10.7.2
• Apple Mac Os X 10.7.3
• Apple Mac OS X 10.6
• Apple Mac OS X 10.6.1
• Apple Mac OS X 10.6.2
• Apple Mac OS X 10.6.3
• Apple Mac OS X 10.6.4
• Apple Mac OS X 10.6.5
• Apple Mac Os X Server 10.6.7
• Apple Mac Os X Server 10.6.8
• Apple Mac Os X Server 10.7
• Apple Mac Os X Server 10.7.1
• Apple Mac Os X Server 10.7.2
• Apple Mac Os X Server 10.7.3
• Apple Mac OS X Server 10.6
• Apple Mac OS X Server 10.6.1
• Apple Mac OS X Server 10.6.2
• Apple Mac OS X Server 10.6.3
• Apple Mac OS X Server 10.6.4
• Apple Mac OS X Server 10.6.5
• Apple Mac OS X Server 10.6.5
• Apple Mac OS X Server 10.6.6
• Apple QuickTime Player 7.0.0
• Apple QuickTime Player 7.0.1
• Apple QuickTime Player 7.0.2
• Apple QuickTime Player 7.0.3
• Apple QuickTime Player 7.0.4
• Apple QuickTime Player 7.0.8
• Apple QuickTime Player 7.1
• Apple QuickTime Player 7.1.1
• Apple QuickTime Player 7.1.2
• Apple QuickTime Player 7.1.3
• Apple QuickTime Player 7.1.4
• Apple QuickTime Player 7.1.5
• Apple QuickTime Player 7.1.6
• Apple QuickTime Player 7.2
• Apple QuickTime Player 7.2.0
• Apple QuickTime Player 7.2.1
• Apple QuickTime Player 7.3
• Apple QuickTime Player 7.3.1
• Apple QuickTime Player 7.3.1.70
• Apple QuickTime Player 7.4
• Apple QuickTime Player 7.4.1
• Apple QuickTime Player 7.4.5
• Apple QuickTime Player 7.5
• Apple QuickTime Player 7.5.5
• Apple QuickTime Player 7.6
• Apple QuickTime Player 7.6.1
• Apple QuickTime Player 7.6.2
• Apple QuickTime Player 7.6.4
• Apple QuickTime Player 7.64.17.73
• Apple QuickTime Player 7.6.5
• Apple QuickTime Player 7.6.6
• Apple QuickTime Player 7.6.6 (1671)
• Apple QuickTime Player 7.6.7
• Apple QuickTime Player 7.6.8
• Apple QuickTime Player 7.6.9
• Apple QuickTime Player 7.7
• Apple QuickTime Player 7.7.1

References

• BugTraq: 53467
• CVE: CVE-2012-0659