HTTP: Apple QuickTime '.m3u' File Remote Stack Buffer Overflow

This signature detects attempts to exploit a known vulnerability in Apple Quicktime. A successful attack can lead to a buffer overflow and arbitrary remote code execution within the context of the client.

Extended Description

Apple QuickTime is prone to a stack-based buffer-overflow vulnerability because it fails to perform adequate boundary checks on user-supplied data. An attacker can exploit this issue to execute arbitrary code in the context of the affected application. Failed exploit attempts will likely result in denial-of-service conditions. QuickTime 7.5.x is vulnerable; other versions may also be affected.

Affected Products

Apple quicktime_player

References

BugTraq: 46799

URL: http://www.apple.com/quicktime/

Short Name

HTTP:STC:STREAM:QT-M3U

Severity

Major

Recommended

False

Recommended Action

Drop

HTTP: Apple QuickTime '.m3u' File Remote Stack Buffer Overflow

Extended Description

Affected Products

References

Found a potential security threat?