Apple QuickTime buffer overflow updated since 12.07.2007
Published:		13.07.2007
Source:		FULL-DISCLOSURE
SecurityVulns ID:		7925
Type:		library
Level:		7/10
Description:		Buffer overflow on SMIL format parsing.

Affected:		APPLE : QuickTime 7.1
CVE:		CVE-2007-2394 (Integer overflow in Apple Quicktime before 7.2 on Mac OS X 10.3.9 and 10.4.9 allows user-assisted remote attackers to execute arbitrary code via crafted (1) title and (2) author fields in an SMIL file, related to improper calculations for memory allocation.)

Original document		CERT, US-CERT Technical Cyber Security Alert TA07-193A -- Apple Releases Security Updates for QuickTime (13.07.2007)
		IDEFENSE, [Full-disclosure] iDefense Security Advisory 07.11.07: Apple QuickTime SMIL File Processing Integer Overflow Vulnerability (12.07.2007)

Discuss:

Read or add your comments to this news (0 comments)