Description
Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a GIF image file with a crafted Netscape Navigator Application Extension Block that modifies the heap in the Picture Modifier block.
References
- 20060111 Updated Advisories - Incorrect CVE Information mailing-list
- 18370 third-party-advisory
- TA06-011A third-party-advisory
- 20060111 [EEYEB-20051031] Apple QuickTime Malformed GIF Heap Overflow mailing-list
- APPLE-SA-2006-01-10 vendor-advisory
- quicktime-gif-bo(24060) vdb-entry
- 333 third-party-advisory
- ADV-2006-0128 vdb-entry
- 1015466 vdb-entry
- 20060111 [EEYEB-20051031] Apple QuickTime Malformed GIF Heap Overflow mailing-list
- 16202 vdb-entry
- VU#913449 third-party-advisory
- http://www.eeye.com/html/research/advisories/AD20060111d.html
- 22338 vdb-entry
- 20060111 Updated Advisories - Incorrect CVE Information mailing-list