CVE-2009-0003

Related Files

Zero Day Initiative Advisory 09-06

Posted Jan 21, 2009

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 09-006 - This vulnerability allows attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must visit a malicious page or open a malicious file. The specific flaw exists within the parsing of AVI files. When the AVI header contains a malformed nBlockAlign value in the _WAVEFORMATEX structure, a heap overflow may occur which can be leveraged to execute arbitrary code under the context of the current user.

tags | advisory, overflow, arbitrary

systems | apple

advisories | CVE-2009-0003

SHA-256 | 32683e18a3f5938bedcc596d878f86461cc50f823f86b1dee606298980fdcd80

Download | Favorite | View