bugtraq - [48Bits Advisory] QuickTime Panorama Sample Atom Heap Overflow

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [day] [month] [year] [list]

Date: Sat, 10 Nov 2007 14:41:32 +0100
From: "[48bits] vulndev" <vulndev@...its.com>
To: bugtraq@...urityfocus.com
Subject: [48Bits Advisory] QuickTime Panorama Sample Atom Heap Overflow

[48bits Advisory] QuickTime Panorama Sample Atom Heap Overflow

Abstract:

QuickTime is prone to a heap overflow vulnerability when parsing
malformed Panorama Sample Atoms, which are used in QuickTime Virtual
Reality
Movies. This Vulnerability allows attackers to execute code on
vulnerable installations. Successful exploitation via Web Browser
requires that the
attacker should trick the user into visiting a specially crafted webpage.

Affected versions :

Tested with QuickTime VR extension 7.2.0.240 included with QuickTime Player 7.2
Patched in QuickTime 7.3

Original advisory and analysis at:

http://www.48bits.com/advisories/qt_pdat_heapbof.pdf

Credit :

Mario Ballano from 48bits.com