HTTP: Apple QuickTime Enof Atom Parsing Heap Overflow
This signature detects attempts to exploit a known vulnerability in the Apple Quicktime. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the affected user.
Extended Description
Buffer overflow in Apple QuickTime before 7.7.4 allows remote attackers to execute arbitrary code or cause a denial of service (application crash) via crafted enof atoms in a movie file.
Affected Products
Apple mac_os_x
References
CVE: CVE-2013-0986
Short Name
HTTP:STC:APPLE-QTIME-ENOF-OF
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
Apple Atom CVE-2013-0986 Enof Heap Overflow Parsing QuickTime
Release Date
07/30/2013
Supported Platforms
srx-branch-12.3
srx-19.3
srx-branch-19.3
vsrx3bsd-19.2
srx-branch-19.4
vsrx-19.4
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx3bsd-19.4
srx-19.4
vsrx-12.3
vmx-19.3
vsrx-19.2
srx-12.3
Sigpack Version
3761
False Positive
Unknown
Vendors
Apple
CVSS Score
9.3