David Geer Talks Tech
Saturday, January 06, 2007
This Apple has a hole Courtesy of http://www.geercom.com (use this link to go home if you surfed here from my professional writing site).
Geer Communications. David Geer - your on-time technology writer!
Welcome!
Apple's QuickTime has an unpatched vulnerability (now five days old). The "Apple QuickTime RTSP URL Buffer Overflow" was first made public New Year's Day (some belated Holiday gift for Apple!).
The vulnerability--discovered with a proof-of-concept attack--exists in QuickTime versions 7.1.3 and earlier, per EEye's ZeroDays page.
A "stack-based" buffer overflow (see http://searchsecurity.techtarget.com/sDefinition/0,290660,sid14_gci549024,00.html for a definition of a buffer overflow) is to blame. In this case, an attacker could use a website-based long rtsp:// URL in a QTL file to cause the buffer to overflow.
This is considered a severe threat that could allow an attacker to execute code of choice remotely to act as a logged on user or administrator, if the machine has admin privileges.
There is as yet no 100-percent solution.
Best Regards,
David Geer - your on time technology writer!
Geer Communications
Geer Communications. David Geer - your on-time technology writer!
Welcome!
Apple's QuickTime has an unpatched vulnerability (now five days old). The "Apple QuickTime RTSP URL Buffer Overflow" was first made public New Year's Day (some belated Holiday gift for Apple!).
The vulnerability--discovered with a proof-of-concept attack--exists in QuickTime versions 7.1.3 and earlier, per EEye's ZeroDays page.
A "stack-based" buffer overflow (see http://searchsecurity.techtarget.com/sDefinition/0,290660,sid14_gci549024,00.html for a definition of a buffer overflow) is to blame. In this case, an attacker could use a website-based long rtsp:// URL in a QTL file to cause the buffer to overflow.
This is considered a severe threat that could allow an attacker to execute code of choice remotely to act as a logged on user or administrator, if the machine has admin privileges.
There is as yet no 100-percent solution.
Best Regards,
David Geer - your on time technology writer!
Geer Communications
