Fortinet Advisory - Apple QuickTime Player StripOffsets Improper Memory Access

Fortinet Security Advisory: FSA-2006-02

Apple QuickTime Player StripOffsets Improper Memory Access

Advisory Date      : January 12, 2006
Reported Date      : November 28, 2005
Vendor             : Apple computers
Affected Products  : Apple QuickTime Player v7.0.3
Severity           : High
Reference      : http://cve.mitre.org/cgi-bin/cvename.cgi?name=3DCVE-2005=
-3711
		 http://docs.info.apple.com/article.html?artnum=3D303101
		 http://www.securityfocus.com/bid/16202/info

Description	   :  Fortinet Security Research Team (FSRT) has discovered a
Vulnerability in the Apple QuickTime Player. Apple QuickTime has a
vulnerability in parsing the specially crafted TIFF image files. This is
due to application failure to sanitize the parameter StripOffsets value
while parsing TIFF image files. A remote attacker could construct a web
page with specially crafted tiff file and entice a victim to view it, whe=
n
the user opens the TIFF image with Internet Explorer or Apple QuickTime
Player, it'll cause memory access violation, and leading to potential
Arbitrary Command Execution.

Impact             : Execute arbitrary code

Solution	   : Apple Computers has released a security update for this
vulnerability, which is available for downloading from Apples's web site
under security update.

Fortinet Protection: Fortinet is protecting network from this
vulnerability with latest IPS update.

Acknowledgment     : Dejun Meng of Fortinet Security Research team found
this vulnerability.


_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/