exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from bugfree

Zero Day Initiative Advisory 08-014

Posted Apr 4, 2008

Authored by Tipping Point, bugfree | Site zerodayinitiative.com

A vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists in the quickTime.qts while parsing corrupted .pict files. The module contains a vulnerable memory copy loop which searches for a terminator value. When this value is changed or omitted, a heap corruption occurs allowing the execution of arbitrary code. Version 7.4.1 is affected.

tags | advisory, remote, arbitrary

systems | apple

advisories | CVE-2008-1019

SHA-256 | 151ed5aeb91dc3c238624606c6681270e735a75bd99a572cc28a6df9e5e228f4

Download | Favorite | View