HTTP: Apple QuickTime SMIL File Handling Integer Overflow
This signature detects attempts to exploit a known vulnerability in Apple QuickTime. A successful attack can lead to an integer overflow and arbitrary remote code execution within the context of the application.
Extended Description
Apple QuickTime is prone to an information-disclosure and multiple remote code-execution vulnerabilities. Remote attackers may exploit these issues by enticing victims into opening maliciously crafted files or visiting maliciously crafted websites. Successful exploits may allow attackers to execute arbitrary code in the context of a user running the vulnerable application or to obtain sensitive information. Failed exploit attempts of remote code-execution issues may result in denial-of-service conditions. Successful exploits of the information-disclosure issue may lead to further attacks.
Affected Products
Apple quicktime_player
Short Name
HTTP:STC:DL:QT-SMIL-FILEHAND
Severity
Major
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
Apple CVE-2007-2394 File Handling Integer Overflow QuickTime SMIL bid:24873
Release Date
10/13/2010
Supported Platforms
srx-branch-19.3
vsrx3bsd-19.2
srx-19.4
vsrx3bsd-19.4
srx-branch-19.4
vsrx-19.4
vsrx-19.2
srx-19.3
srx-branch-12.3
mx-12.3
mx-19.4
vmx-19.4
mx-19.3
vsrx-12.3
vmx-19.3
srx-12.3
Sigpack Version
3336
False Positive
Unknown
Vendors
Apple
CVSS Score
9.3