At a glance:
| ID | 11624 |
| Created | Jan 16, 2006 |
| Description Updated | Nov 06, 2017 |
| Severity |
|
| Coverage |
IPS (Regular DB)
IPS (Extended DB)
|
| Default Action | pass |
| Active |
|
| Affected OS | Windows, MacOS |
| Affected App | Apple |
Legend
| Enabled/Available |
|
| Disabled/Not Avaliable |
|
Update History
| Date | Version | Detail |
|---|---|---|
| 2017-11-07 | 12.260 | Previous name: "Apple. Quicktime. Multiple. Vuln" |
Refine Search
Intrusion Prevention
Apple.QuickTime.Multiple.Integer.Overflow
Description
A vulnerability in Apple QuickTime may allow system compromise. The vulnerability is due to a boundry condition error when the application handles specially crafted QTIF, TGA, TIFF, and GIF image formats. An integer overflow allows remote attackers to execute arbitrary code via a TIFF image file with modified image height and width (ImageWidth) tags. Successful exploitation may allow a remote attacker to trigger a denial of service condition or gain unauthorized access.
Affected Products
Apple QuickTime Player 7.0.3
Apple QuickTime Player 7.0.2
Apple QuickTime Player 7.0.1
Apple QuickTime Player 7.0
Impact
System compromise.
Recommended Actions
Apple has released advisory APPLE-SA-2006-01-10 including QuickTime 7.0.4 to address these issues.