CVE

Id
15296  
CVE No.
CVE-2005-4092  
Status
Candidate  
Description
Multiple heap-based buffer overflows in QuickTime.qts in Apple QuickTime Player 7.0.3 and iTunes 6.0.1 (3) and earlier allow remote attackers to cause a denial of service (crash) and execute arbitrary code via a .mov file with (1) a Movie Resource atom with a large size value, or (2) an stsd atom with a modified Sample Description Table size value, and possibly other vectors involving media files. NOTE: item 1 was originally identified by CVE-2005-4127 for a pre-patch announcement, and item 2 was originally identified by CVE-2005-4128 for a pre-patch announcement.  
Phase
Assigned (20051208)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
119692 15296 CVE-2005-4092 MISC:http://www.security-protocols.com/advisory/sp-x21-advisory.txt  View
119693 15296 CVE-2005-4092 MISC:http://www.security-protocols.com/modules.php?name=News&file=article&sid=3133  View
119694 15296 CVE-2005-4092 MISC:http://www.security-protocols.com/modules.php?name=News&file=article&sid=3109  View
119695 15296 CVE-2005-4092 MISC:http://security-protocols.com/advisory/sp-x21-advisory.txt  View
119696 15296 CVE-2005-4092 BUGTRAQ:20060111 [EEYEB-20051117B] Apple iTunes (QuickTime.qts) Heap Overflow  View
119697 15296 CVE-2005-4092 URL:http://www.securityfocus.com/archive/1/archive/1/421569/100/0/threaded  View
119698 15296 CVE-2005-4092 BUGTRAQ:20060111 [EEYEB-20051117A] Apple QuickTime STSD Atom Heap Overflow  View
119699 15296 CVE-2005-4092 URL:http://www.securityfocus.com/archive/1/archive/1/421635/100/0/threaded  View
119700 15296 CVE-2005-4092 BUGTRAQ:20060111 Updated Advisories - Incorrect CVE Information  View
119701 15296 CVE-2005-4092 URL:http://www.securityfocus.com/archive/1/archive/1/421547/100/0/threaded  View
119702 15296 CVE-2005-4092 EEYE:EEYEB-20051117B  View
119703 15296 CVE-2005-4092 MISC:http://www.eeye.com/html/research/upcoming/20051117b.html  View
119704 15296 CVE-2005-4092 EEYE:EEYEB-20051117A  View
119705 15296 CVE-2005-4092 MISC:http://www.eeye.com/html/research/upcoming/20051117a.html  View
119706 15296 CVE-2005-4092 APPLE:APPLE-SA-2006-01-10  View
119707 15296 CVE-2005-4092 URL:http://docs.info.apple.com/article.html?artnum=303101  View
119708 15296 CVE-2005-4092 CERT:TA06-011A  View
119709 15296 CVE-2005-4092 URL:http://www.us-cert.gov/cas/techalerts/TA06-011A.html  View
119710 15296 CVE-2005-4092 CERT-VN:VU#921193  View
119711 15296 CVE-2005-4092 URL:http://www.kb.cert.org/vuls/id/921193  View
119712 15296 CVE-2005-4092 BID:15732  View
119713 15296 CVE-2005-4092 URL:http://www.securityfocus.com/bid/15732  View
119714 15296 CVE-2005-4092 VUPEN:ADV-2005-3012  View
119715 15296 CVE-2005-4092 URL:http://www.vupen.com/english/advisories/2005/3012  View
119716 15296 CVE-2005-4092 VUPEN:ADV-2006-0128  View
119717 15296 CVE-2005-4092 URL:http://www.vupen.com/english/advisories/2006/0128  View
119718 15296 CVE-2005-4092 SECTRACK:1015356  View
119719 15296 CVE-2005-4092 URL:http://securitytracker.com/id?1015356  View
119720 15296 CVE-2005-4092 SECTRACK:1015396  View
119721 15296 CVE-2005-4092 URL:http://securitytracker.com/id?1015396  View
119722 15296 CVE-2005-4092 SECTRACK:1015397  View
119723 15296 CVE-2005-4092 URL:http://securitytracker.com/id?1015397  View
119724 15296 CVE-2005-4092 SECUNIA:18149  View
119725 15296 CVE-2005-4092 URL:http://secunia.com/advisories/18149  View
119726 15296 CVE-2005-4092 SECUNIA:18370  View
119727 15296 CVE-2005-4092 URL:http://secunia.com/advisories/18370  View
119728 15296 CVE-2005-4092 SREASON:334  View
119729 15296 CVE-2005-4092 URL:http://securityreason.com/securityalert/334  View
119730 15296 CVE-2005-4092 SREASON:336  View

Related JVN