Apple QuickTime RTSP Reply Reason-Phrase Buffer Overflow - Secunia Advisories - Vulnerability Intelligence

Apple QuickTime RTSP Reply Reason-Phrase Buffer Overflow
Secunia Advisory:	SA28423	Advisory Toolbox: Issue ticket Save in to-do list Mark as handled Exploit information Download as PDF Review actions Add comment
Release Date:	2008-01-11
Last Update:	2008-02-07
Popularity:	18,653 views

Critical:	Highly critical
Impact:	System access
Where:	From remote
Solution Status:	Vendor Patch

Software:	Apple QuickTime 7.x

Binary Analysis:	BA350 :: Available for 1 Credit

Subscribe:	Instant alerts on relevant vulnerabilities

CVE reference:	CVE-2008-0234

Description: Luigi Auriemma has reported a vulnerability in Apple QuickTime, which potentially can be exploited by malicious people to compromise a user's system. The vulnerability is caused due to a boundary error when handling RTSP replies and can be exploited to cause a heap-based buffer overflow via e.g. sending a specially crafted reply containing an overly-long "Reason-Phrase". Successful exploitation may allow execution of arbitrary code, but requires that the user is e.g. tricked into opening a malicious QTL file or visiting a malicious web site. The vulnerability is reported in version 7.3.1.70. Other versions may also be affected. Solution: Update to QuickTime 7.4.1. QuickTime 7.4.1 for Leopard: http://www.apple.com/support/downloads/quicktime741forleopard.html QuickTime 7.4.1 for Tiger: http://www.apple.com/support/downloads/quicktime741fortiger.html QuickTime 7.4.1 for Panther: http://www.apple.com/support/downloads/quicktime741forpanther.html QuickTime 7.4.1 for Windows: http://www.apple.com/support/downloads/quicktime741forwindows.html Provided and/or discovered by: Luigi Auriemma Changelog: 2008-02-04: Added CVE reference. 2008-02-07: Updated "Description" and "Solution". Added link to "Original Advisory" section. Original Advisory: Apple: http://docs.info.apple.com/article.html?artnum=307407 Luigi Auriemma: http://aluigi.altervista.org/adv/quicktimebof-adv.txt Other References: US-CERT VU#112179: http://www.kb.cert.org/vuls/id/112179

Track this Secunia Advisory
Customers of the Secunia Vulnerability Intelligence solutions will automatically receive updates when new information regarding this advisory is released. Read more about our Vulnerability Intelligence solutions and what they can do for you and your company.

About this Secunia Advisory
Please note: The information that this Secunia Advisory is based on comes from a third party unless stated otherwise. Secunia collects, validates, and verifies all vulnerability reports issued by security research groups, vendors, and others.

Latest Advisories

Today

New advisories:	10
New vulnerabilities:	32
Updated advisories:	13

Less // 77 views

SemanticScuttle Cross-Site Scripting Vulnerabilities

Moderately // 87 views

Easyedit CMS Multiple SQL Injection Vulnerabilities

Highly // 86 views

Fedora update for thunderbird

Less // 108 views

IBM Workplace Web Content Management Cross-Site Scripting Vulnerabilities

Highly // 241 views

BitDefender Antivirus PDF Processing Memory Corruption Vulnerability

Moderately // 182 views

xt:Commerce SQL Injection Vulnerability

Less // 161 views

Softbiz Classifieds Script "msg" Cross-Site Scripting Vulnerability

Not // 232 views

Checkpoint VPN-1 Information Disclosure Vulnerability

Moderately // 207 views

Avaya CMS Solaris "sadmind" Buffer Overflow Vulnerability

Moderately // 232 views

EMC Control Center SAN Manager Multiple Vulnerabilities

Solutions | More...

Send Feedback to Secunia
If you have new information regarding this Secunia advisory or a product in our database, please send it to us using either our web form or email us at vuln@secunia.com. Ideas, suggestions, and other feedback are most welcome.