exploit the possibilities

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 1 of 1

Files from Sanbin Li

Zero Day Initiative Advisory 08-015

Posted Apr 4, 2008

Authored by Tipping Point, Sanbin Li | Site zerodayinitiative.com

A vulnerability allows attackers to execute arbitrary code on vulnerable installations of Apple QuickTime Player. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the quicktime.qts library. The vulnerability resides in the component's parsing of 'crgn' atoms. A lack of proper sanity checks on the region size field can result in a heap based buffer overflow leading to arbitrary code execution under the context of the currently logged in user. Version 7.4.1 is affected.

tags | advisory, overflow, arbitrary, code execution

systems | apple

advisories | CVE-2008-1017

SHA-256 | 4417a0eb999d64be74a7f967018ba0da3e32feea59b5f9554d659feb9d5d4925

Download | Favorite | View