Home page logo
/

fulldisclosure logo Full Disclosure mailing list archives

Re: [EEYEB-20051117B] Apple iTunes (QuickTime.qts)Heap Overflow
From: "Dave Korn" <davek_throwaway () hotmail com>
Date: Thu, 12 Jan 2006 14:51:50 -0000

Mark Senior wrote in 
news:70f230c70601111530u1f0f688bt520efc44c94ef358 () mail gmail com
This must be an unintentional repost, surely?

From the description of CAN-2004-0431:

Integer overflow in Apple QuickTime (QuickTime.qts) before 6.5.1
allows attackers to execute arbitrary code

  That's a totally different issue, the bug described in the original post 
isn't an integer overflow.  I would imagine the author of that post used one 
of eEye's earlier QT bug reports as a template and just forgot to update the 
CAN number.  If you check their website

http://www.eeye.com/html/research/advisories/AD20060111b.html

you'll see they've corrected both the AD number and the CAN number.


    cheers,
      DaveK
-- 
Can't think of a witty .sigline today.... 



_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/


  By Date           By Thread  

Current thread:
[ Nmap | Sec Tools | Mailing Lists | Site News | About/Contact | Advertising | Privacy ]