Test Kennung:	1.3.6.1.4.1.25623.1.0.901017
Kategorie:	Buffer overflow
Titel:	Apple QuickTime Multiple Vulnerabilities (Sep 2009)
Zusammenfassung:	Apple QuickTime is prone to multiple vulnerabilities.
Beschreibung:	Summary: Apple QuickTime is prone to multiple vulnerabilities. Vulnerability Insight: - A memory corruption issue exists when handling 'H.264' movie files. - An error in the parsing of 'MPEG-4' video files which causes buffer overflow. - An integer overflow error when processing the 'SectorShift' and 'cSectFat' fields of a FlashPix file header. This can be exploited to cause a heap-based buffer overflow via a specially crafted FlashPix '.fpx' file. - A boundary error exists when processing samples from a 'H.264' encoded MOV file. This can be exploited to cause a heap-based buffer overflow via a specially crafted 'MOV' file. Vulnerability Impact: Successful exploitation could allow attackers to execute arbitrary code in the context of an affected application, and can cause Denial of Service. Affected Software/OS: Apple QuickTime before 7.6.4 on Windows. Solution: Upgrade to Apple QuickTime version 7.6.4 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Querverweis:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2202 http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html BugTraq ID: 36328 http://www.securityfocus.com/bid/36328 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5467 http://www.vupen.com/english/advisories/2009/3184 XForce ISS Database: quicktime-h264movie-code-execution(53127) https://exchange.xforce.ibmcloud.com/vulnerabilities/53127 Common Vulnerability Exposure (CVE) ID: CVE-2009-2203 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5672 Common Vulnerability Exposure (CVE) ID: CVE-2009-2798 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6258 Common Vulnerability Exposure (CVE) ID: CVE-2009-2799 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6405
Copyright	Copyright (C) 2009 Greenbone AG

Dies ist nur einer von 145615 Anfälligkeitstests in unserem Testpaket. Finden Sie mehr über unsere vollständigen Sicherheitsüberprüfungen heraus. Um einen gratis Test für diese Anfälligkeit auf Ihrem System durchlaufen zu lassen, registrieren Sie sich bitte unten.