CVE-2005-2340 Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Image File (QTIF), (2) PICT, or (3) JPEG format image with a lo...
HighCVSS 7.5
EPSS 25.5%
PoC
- Published
- Updated
- Exploit status
- Proof-of-concept only
Description
Heap-based buffer overflow in Apple Quicktime before 7.0.4 allows remote attackers to execute arbitrary code via a crafted (1) QuickTime Image File (QTIF), (2) PICT, or (3) JPEG format image with a long data field.
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| apple quicktime | <= 7.0.3 | No fix listed |
| apple quicktime | = 7.0 | No fix listed |
| apple quicktime | = 7.0.1 | No fix listed |
| apple quicktime | = 7.0.2 | No fix listed |
References
- 20060111 [CIRT.DK] Apple QuickTime 7.0.3 and earlier - JPG/PICT Buffer Overflow mailing-list
- 20060111 [EEYEB-20051220] Apple QuickTime QTIF Stack Overflow mailing-list vendor-advisory
- 20060111 Updated Advisories - Incorrect CVE Information mailing-list
- APPLE-SA-2006-01-10 patch vendor-advisory
- 18370 patch third-party-advisory vendor-advisory
- 332 third-party-advisory
- 1015463 patch vdb-entry
- www.cirt.dk vendor-advisory
- VU#629845 patch third-party-advisory us-government-resource
- VU#687201 patch third-party-advisory us-government-resource
- 22333 patch vdb-entry
- 22334 patch vdb-entry
- 22335 patch vdb-entry
- 20060111 Updated Advisories - Incorrect CVE Information mailing-list
- 20060111 [EEYEB-20051220] Apple QuickTime QTIF Stack Overflow mailing-list
- 16202 patch vdb-entry
- 16212 exploit vdb-entry
- TA06-011A patch third-party-advisory us-government-resource
- ADV-2006-0128 vdb-entry vendor-advisory
- quicktime-qtif-bo(24054) vdb-entry