mailing list archives
Re: [EEYEB-20051117B] Apple iTunes (QuickTime.qts)Heap Overflow
From: "Dave Korn" <davek_throwaway () hotmail com>
Date: Thu, 12 Jan 2006 14:51:50 -0000
Mark Senior wrote in
news:70f230c70601111530u1f0f688bt520efc44c94ef358 () mail gmail com
This must be an unintentional repost, surely?
From the description of CAN-2004-0431:
Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1
allows attackers to execute arbitrary code
That's a totally different issue, the bug described in the original post
isn't an integer overflow. I would imagine the author of that post used one
of eEye's earlier QT bug reports as a template and just forgot to update the
CAN number. If you check their website
you'll see they've corrected both the AD number and the CAN number.
Can't think of a witty .sigline today....
Full-Disclosure - We believe in it.
Hosted and sponsored by Secunia - http://secunia.com/