Skip to main content

Apple QuickTime Streaming Debug Error Logging Buffer Overflow Vulnerability

Last Update Date: 28 Jan 2011 Release Date: 27 Jul 2010 4660 Views

RISK: Medium Risk

A vulnerability has been identified in Apple QuickTime, which could be exploited by attackers to compromise a vulnerable system.

This issue is caused by a boundary error in QuickTimeStreaming.qtx when constructing a string to write to a debug log file. and cause a stack-based buffer overflow. It may allow the attackers to execute arbitrary code by tricking a user into visiting a specially crafted web page that references a SMIL file containing an overly long URL.


Impact

  • Remote Code Execution

System / Technologies affected

  • Apple QuickTime 7.x

Solutions

There is no patch available for this vulnerability currently.


Vulnerability Identifier

  • No CVE information is available

Source


Related Link