ID de Prueba:	1.3.6.1.4.1.25623.1.0.901017
Categoría:	Buffer overflow
Título:	Apple QuickTime Multiple Vulnerabilities (Sep 2009)
Resumen:	Apple QuickTime is prone to multiple vulnerabilities.
Descripción:	Summary: Apple QuickTime is prone to multiple vulnerabilities. Vulnerability Insight: - A memory corruption issue exists when handling 'H.264' movie files. - An error in the parsing of 'MPEG-4' video files which causes buffer overflow. - An integer overflow error when processing the 'SectorShift' and 'cSectFat' fields of a FlashPix file header. This can be exploited to cause a heap-based buffer overflow via a specially crafted FlashPix '.fpx' file. - A boundary error exists when processing samples from a 'H.264' encoded MOV file. This can be exploited to cause a heap-based buffer overflow via a specially crafted 'MOV' file. Vulnerability Impact: Successful exploitation could allow attackers to execute arbitrary code in the context of an affected application, and can cause Denial of Service. Affected Software/OS: Apple QuickTime before 7.6.4 on Windows. Solution: Upgrade to Apple QuickTime version 7.6.4 or later. CVSS Score: 9.3 CVSS Vector: AV:N/AC:M/Au:N/C:C/I:C/A:C
Referencia Cruzada:	Common Vulnerability Exposure (CVE) ID: CVE-2009-2202 http://lists.apple.com/archives/security-announce/2009/Sep/msg00002.html http://lists.apple.com/archives/security-announce/2009/Nov/msg00000.html BugTraq ID: 36328 http://www.securityfocus.com/bid/36328 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5467 http://www.vupen.com/english/advisories/2009/3184 XForce ISS Database: quicktime-h264movie-code-execution(53127) https://exchange.xforce.ibmcloud.com/vulnerabilities/53127 Common Vulnerability Exposure (CVE) ID: CVE-2009-2203 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A5672 Common Vulnerability Exposure (CVE) ID: CVE-2009-2798 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6258 Common Vulnerability Exposure (CVE) ID: CVE-2009-2799 https://oval.cisecurity.org/repository/search/definition/oval%3Aorg.mitre.oval%3Adef%3A6405
Copyright	Copyright (C) 2009 Greenbone AG

Esta es sólo una de 146377 pruebas de vulnerabilidad en nuestra serie de pruebas. Encuentre más sobre cómo ejecutar una auditoría de seguridad completa. Para ejecutar una prueba gratuita de esta vulnerabilidad contra su sistema, regístrese ahora.