----------------------------------------------------------------------

Want a new job?

http://secunia.com/secunia_security_specialist/
http://secunia.com/hardcore_disassembler_and_reverse_engineer/

International Partner Manager - Project Sales in the IT-Security
Industry:
http://corporate.secunia.com/about_secunia/64/

----------------------------------------------------------------------

TITLE:
Apple QuickTime Multiple Vulnerabilities

SECUNIA ADVISORY ID:
SA29293

VERIFY ADVISORY:
http://secunia.com/advisories/29293/

CRITICAL:
Highly critical

IMPACT:
System access

WHERE:
>From remote

SOFTWARE:
Apple QuickTime 7.x
http://secunia.com/product/5090/

DESCRIPTION:
Some vulnerabilities have been reported in Apple QuickTime, which can
be exploited by malicious people to compromise a user's system.

1) A boundary error when parsing packed scanlines from a PixData
structure in a PICT file can be exploited to cause a heap-based
buffer overflow via a specially crafted PICT file.

2) An error in the processing of AAC-encoded media content can be
exploited to cause a memory corruption via a specially crafted media
file.

3) A boundary error in the processing of PICT files can be exploited
to cause a heap-based buffer overflow via a specially crafted PICT
file.

4) A boundary error in the processing of Indeo video codec content
can be exploited to cause a stack-based buffer overflow via a
specially crafted movie file with Indeo video codec content.

5) An error in the handling of "file:" URLs can be exploited to e.g.
execute arbitrary programs when playing specially crafted QuickTIme
content in QuickTime Player.

Successful exploitation of these vulnerabilities may allow execution
of arbitrary code.

SOLUTION:
Update to version 7.5 (via Software Update or Apple Downloads. See
vendor's advisory for details).

PROVIDED AND/OR DISCOVERED BY:
1) Dyon Balding, Secunia Research
2) Independently discovered by:
* Dave Soldera, NGS Software
* Jens Alfke
3) Liam O Murchu, Symantec
4) An anonymous researcher, reported via ZDI
5) Independently discovered by:
* Vinoo Thomas and Rahul Mohandas, McAfee Avert Labs
* Petko D. (pdp) Petkov, GNUCITIZEN

ORIGINAL ADVISORY:
Apple:
http://support.apple.com/kb/HT1991

Secunia Research:
http://secunia.com/secunia_research/2008-9/

----------------------------------------------------------------------

About:
This Advisory was delivered by Secunia as a free service to help
everybody keeping their systems up to date against the latest
vulnerabilities.

Subscribe:
http://secunia.com/secunia_security_advisories/

Definitions: (Criticality, Where etc.)
http://secunia.com/about_secunia_advisories/


Please Note:
Secunia recommends that you verify all advisories you receive by
clicking the link.
Secunia NEVER sends attached files with advisories.
Secunia does not advise people to install third party patches, only
use those supplied by the vendor.

----------------------------------------------------------------------

Unsubscribe: Secunia Security Advisories
http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org

----------------------------------------------------------------------