HTTP: Apple QuickTime FLIC Animation File Buffer Overflow

This signature detects attempts to exploit a known vulnerability in QuickTime FLIC Animation File handling function. A successful attack could allow the attacker to execute arbitrary code on the targeted system. Failed exploit attempts could result in a denial of service condition.

Extended Description

Apple QuickTime is prone to multiple vulnerabilities because it fails to properly bounds-check and sanitize user-supplied data. An attacker can exploit these issues to execute arbitrary code in the context of the victim user running the vulnerable application. Successful exploits may facilitate a remote compromise of affected computers.

Affected Products

Apple quicktime_player

References

BugTraq: 19976

CVE: CVE-2006-4384

Short Name

HTTP:STC:DL:APPLE-QT-FLIC-BO

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Apple QuickTime FLIC Animation File Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?