RTSP.Content-Type.Header.Buffer.Overflow

Description

This indicates an attempt to exploit a buffer-overflow vulnerability in the Real Time Streaming Protocol (RTSP) used by Apple's QuickTime Streaming Server and QuickTime Player.
The vulnerability is caused by an error in the way that QuickTime handles the RTSP Content-Type header. It allows a remote attacker to execute arbitrary code via a crafted web page.

Affected Products

Apple QuickTime Player 7.3

Impact

System Compromise: Remote attackers can gain control of vulnerable systems.

Recommended Actions

Currently we are not aware of any official patches supplied by the vendor for this issue.

References

http://www.exploit-db.com/exploits/11027/ http://www.exploit-db.com/exploits/9925 http://www.kb.cert.org/vuls/id/659761 http://www.kb.cert.org/vuls/id/659761