[Full-disclosure] Apple QuickTimeStreamingServer RTSP Server Vulnerability [MU-200605-02]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Apple QuickTimeStreamingServer RTSP Server Vulnerability
[MU-200605-02]
May 11, 2006

http://labs.musecurity.com/advisories.html

Affected Product / Versions:

QuickTimeStreamingServer 5.5 and earlier

Product Overview:

The Real Time Streaming Protocol (RTSP) is a protocol which allows a
client to remotely control a streaming media server. RTSP is
implemented in the QuickTimeStreamingServer, a cross platform media
streaming server.

Vulnerability Details:

A remote buffer overflow condition in Apple's RTSP service could
allow for arbitrary code execution. The vulnerable code is triggered
with the use of a malformed RTSP header.

Vendor Response / Solution:

Mu Security would like to thank Apple for timely remediation of these
vulnerabilities.

Credit:

This vulnerability was discovered by the Mu Security research team.

http://labs.musecurity.com/pgpkey.txt

Mu Security is an early-stage innovator creating a new class of
security analysis system. The company's mission is to widely deploy
security analysis and reduce product and application vulnerabilities.
Mu's founders include industry-recognized experts in the IDP, open
source protocol analysis tools, ethical hacking, and network
management markets The security analysis process and product solution
provide a rigorous and streamlined methodology for verifying and
improving the security readiness of any IP-based product or
application. Mu Security, headquartered in Sunnyvale, California, is
backed by preeminent venture capital firms including Accel Partners
and Benchmark Capital.

The information within this paper may change without notice. Use of
this information constitutes acceptance for use in an AS IS
condition. There are no warranties, implied or express, with regard
to this information. In no event shall the author be liable for any
direct or indirect damages whatsoever arising out of or in connection
with the use or spread of this information. Any use of this
information is at the user's own risk.

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.2.2 (Darwin)

iD8DBQFEY797Ml+docYeP+YRAk7cAJ9IxGCMsOiNyviKzMa3qEOV8oph8QCfa2wz
j964qHFHY4I8yPM1pyq4SEc=
=Gcsg
-----END PGP SIGNATURE-----

---

Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/