QuickTime Player Streaming Debug Error Logging Buffer Overflow Vulnerability

  1. Network Vulnerabilities
  2. Buffer overflow
  3. QuickTime Player Streaming Debug Error Logging Buffer Overflow Vulnerability
Summary
The host is running QuickTime Player and is prone to buffer overflow vulnerability.
Impact
Successful exploitation could allow attackers to cause a stack-based buffer overflow by tricking a user into viewing a specially crafted web page that references a SMIL file containing an overly long URL. Impact Level: Application
Solution
Upgrade to QuickTime Player version 7.6.7 or later For updates refer to http://www.apple.com/quicktime/download/
Insight
The flaw is due to a boundary error in 'QuickTimeStreaming.qtx' when constructing a string to write to a debug log file.
Affected
QuickTime Player version prior to 7.6.7
References
Updated on 2015-03-25
Severity
High Severity
Classification
Related Vulnerabilities