HTTP: Apple QuickTime Alis Volume Name Parsing Stack Buffer Overflow
This signature detects attempts to exploit a known vulnerability in the Apple QuickTime. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the user.
Extended Description
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted dref atoms in a movie file.
References
BugTraq: 60097
CVE: CVE-2013-1017
URL: http://support.apple.com/kb/ht5770 http://www.zerodayinitiative.com/advisories/zdi-13-110/
Short Name
HTTP:STC:APPLE-QTIME-DREF-BO
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
Alis Apple Buffer CVE-2013-1017 Name Overflow Parsing QuickTime Stack Volume bid:60097
Release Date
08/07/2013
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3761
False Positive
Unknown
CVSS Score
9.3