Nmap Security Scanner
*Intro
*Ref Guide
*Install Guide
*Download
*Changelog
*Book
*Docs
Security Lists
*Nmap Hackers
*Nmap Dev
*Bugtraq
*Full Disclosure
*Pen Test
*Basics
*More
Security Tools
*Pass crackers
*Sniffers
*Vuln Scanners
*Web scanners
*Wireless
*Exploitation
*Packet crafters
*More
Site News
Site Search:
Exploit World
Advertising
About/Contact
Credits
Sponsors:
edgeos network security services platform







Bugtraq: QuickTime for Windows malformed GIF DoS

QuickTime for Windows malformed GIF DoS

From: <liquid_at_cyberspace.org>
Date: 13 Apr 2005 02:06:47 -0000
('binary' encoding is not supported, stored as-is) QuickTime for Windows has problems with malformed GIF images. Open test.gif with PictureViewer and it will crash. DrWatson is reporting access violation. Main reason for crash is malformed value of "depth start", in test.gif this value is set to 255 (0xff hexadecimal). I've tested about twenty different values in range 0x00-0xfe, and PictureViewer in all cases reports that file is corrupted. It leads to assumption that there is some kind of integer overflow in processing GIF files.

Also, this could be done with almost any GIF file. Simply change "depth start" byte to 0xff. If it doesn't crash PictureViewer try to change width and height of logical screen in GIF header.

I dont know if this could be used for code execution.

This is tested on freshly updated QuickTime, version 6.5.2.

And here is test.gif:

00000000 :47 49 46 38 39 61 0F 01 - 0F 01 00 00 00 21 F9 04
00000010 :00 00 00 00 00 2C 00 00 - 00 00 00 01 00 01 00 FF
Received on Apr 12 2005

[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]