CVE

Id
8859  
CVE No.
CVE-2004-0431  
Status
Candidate  
Description
Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1 allows attackers to execute arbitrary code via a large "number of entries" field in the sample-to-chunk table data for a .mov movie file, which leads to a heap-based buffer overflow.  
Phase
Assigned (20040430)  
Votes
None (candidate not yet proposed)  
Comments
 

Actions

Related CVE References

Id CVE Id CVE No. Reference Actions
56503 8859 CVE-2004-0431 BUGTRAQ:20040502 EEYE: Apple QuickTime (QuickTime.qts) Heap Overflow  View
56504 8859 CVE-2004-0431 URL:http://marc.info/?l=bugtraq&m=108360110618389&w=2  View
56505 8859 CVE-2004-0431 NTBUGTRAQ:20040502 EEYE: Apple QuickTime (QuickTime.qts) Heap Overflow  View
56506 8859 CVE-2004-0431 URL:http://marc.info/?l=ntbugtraq&m=108356485013237&w=2  View
56507 8859 CVE-2004-0431 APPLE:APPLE-SA-2004-04-30  View
56508 8859 CVE-2004-0431 URL:http://lists.apple.com/mhonarc/security-announce/msg00048.html  View
56509 8859 CVE-2004-0431 CERT-VN:VU#782958  View
56510 8859 CVE-2004-0431 URL:http://www.kb.cert.org/vuls/id/782958  View
56511 8859 CVE-2004-0431 XF:quicktime-heap-bo(16026)  View

Related JVN

Id JVN No. Title Summary CVE No. CVE Id CVSS_v2 CVSS_v3 JVN URL Actions
62830 JVNDB-2004-000172 ProFTPD における CIDR 形式の ACL によりアクセス制御を回避される脆弱性 ProFTPD には、Allow および Deny ディレクティブにおいて CIDR 形式での IP アドレスの表記を使用した ACL を適用している場合、そのアクセス制限が適切に行われず AllowAll のように全てのアクセスを許可してしまう脆弱性が存在します。 CVE-2004-0432 8859 7.5 http://jvndb.jvn.jp/ja/contents/2004/JVNDB-2004-000172.html  View