CVE-2009-0006

Related Files

Zero Day Initiative Advisory 09-07

Posted Jan 21, 2009

Authored by Tipping Point | Site zerodayinitiative.com

Zero Day Initiative Advisory 09-007 - This vulnerability allows remote attackers to execute arbitrary code on vulnerable installations of Apple QuickTime. User interaction is required to exploit this vulnerability in that the target must open a malicious file. The specific flaw exists in the handling of movie data encoded using the Cinepak Video Codec. When parsing the data in the MDAT atom, there exists a signedness error which leads to a heap overflow. When this occurs it can be further leveraged to execute arbitrary code under the context of the current user.

tags | advisory, remote, overflow, arbitrary

systems | apple

advisories | CVE-2009-0006

SHA-256 | 3d3041e57e3d4f81add0aa5f963216ba06122a2034185a3929bda170154e291a

Download | Favorite | View