CVE-2005-2756

Related Files

quicktime-pict-adv.txt

Posted Nov 4, 2005

Authored by Piotr Bania | Site pb.specialised.info

Apple QuickTime PictureViewer is reported prone to remote memory overwrite vulnerability (exploitable via remotely originated content). Expansion of compressed PICT data could exceed the size of the destination buffer, this cause an memory overwrite. The vulnerability may lead to remote code execution when specially crafted picture file (PICT file) is being loaded. Software affected: QuickTime package 7.0.1 for Mac OS X 10.3, QuickTime package 7.0.1 for Mac OS X 10.4, QuickTime package 6.5.2 for Mac OS X 10.3, QuickTime package 6.5.2 for Mac OS X 10.2, QuickTime package 7x for Windows.

tags | advisory, remote, code execution

systems | windows, apple, osx

advisories | CVE-2005-2756

SHA-256 | 3b036f60cdfd01972d16163f01c31f694e97731c38b410af970ba5984b080fa5

Download | Favorite | View