Quicktime Multiple Vulnerabilities

[TCH-Thomas]

From:

Secunia (secunia.com/advisories/29293/)

 

Rating:

Highly critical

 

Description:

Some vulnerabilities have been reported in Apple QuickTime, which can be exploited by malicious people to compromise a user's system.

 

1) A boundary error when parsing packed scanlines from a PixData structure in a PICT file can be exploited to cause a heap-based buffer overflow via a specially crafted PICT file.

 

2) An error in the processing of AAC-encoded media content can be exploited to cause a memory corruption via a specially crafted media file.

 

3) A boundary error in the processing of PICT files can be exploited to cause a heap-based buffer overflow via a specially crafted PICT file.

 

4) A boundary error in the processing of Indeo video codec content can be exploited to cause a stack-based buffer overflow via a specially crafted movie file with Indeo video codec content.

 

5) An error in the handling of "file:" URLs can be exploited to e.g. execute arbitrary programs when playing specially crafted QuickTIme content in QuickTime Player.

 

Successful exploitation of these vulnerabilities may allow execution of arbitrary code.

 

Solution:

Update to version 7.5 or use Quick Time Alternative or Quick Time Lite instead when they have been updated.

[TCH-Bruce]

Again? Thanks Thomas.

[TCH-Thomas]

Don´t know since I use one the alternative versions but the Secunia site said so.