Description
Integer overflow in Apple QuickTime before 7.1.5 allows remote user-assisted attackers to cause a denial of service (crash) and possibly execute arbitrary code via a crafted QuickTime movie with a User Data Atom (UDTA) with an Atom size field with a large value.
References
- ADV-2007-0825 vdb-entry
- quicktime-udta-atoms-overflow(32819) vdb-entry
- http://secway.org/advisory/AD20070306.txt
- 33902 vdb-entry
- http://www.zerodayinitiative.com/advisories/ZDI-07-010.html
- 22827 vdb-entry
- 20070306 Apple QuickTime udta ATOM Integer Overflow mailing-list
- 24359 third-party-advisory
- APPLE-SA-2007-03-05 vendor-advisory
- 1017725 vdb-entry
- 20070306 Apple QuickTime udta ATOM Integer Overflow mailing-list
- TA07-065A third-party-advisory
- 20070307 ZDI-07-010: Apple Quicktime UDTA Parsing Heap Overflow Vulnerability mailing-list
- http://docs.info.apple.com/article.html?artnum=305149
- VU#861817 third-party-advisory
- 22844 vdb-entry