ID: 3519
Date: 14/12/2007
Title: 3519 - APPLE-SA-2007-12-13 QuickTime 7.3.1
Platform level affected:None
Hardware components affected:Apple MAC
Specific operating systems components affected: Apple Mac OS
Other software: Other
Remediation Summary:Update your copy of the software with the download available from the supplier.
Vendors affected:Apple
Applications affected:Quicktime
Adversity source: Unknown
Attack Vector: Vulnerability exploitation
Virulence: Unknown
Warning Status: Unknown
Potential Damage: Remote execution/modification
Possible Duration: Unknown
Availability of fix: Available
Type of fix: Patch
Source: Apple
Reliability of source: Trusted
Source URL: http://www.apple.com/support/downloads/
Abstract: Apple have advised that QuickTime 7.3.1 is now available and addresses a number of issues in versions used Mac OS X v10.3.9, Mac OS X v10.4.9 or later, Mac OS X v10.5 or later and Windows Vista / XP SP2.
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1
APPLE-SA-2007-12-13 QuickTime 7.3.1
QuickTime 7.3.1 is now available and addresses the following issues:
QuickTime
CVE-ID: CVE-2007-6166
Available for: Mac OS X v10.3.9, Mac OS X v10.4.9 or later, Mac OS X v10.5 or later, Windows Vista / XP SP2
Impact: Viewing a maliciously crafted RTSP movie may lead to an unexpected application termination or arbitrary code execution
Description: A buffer overflow exists in QuickTime's handling of Real Time Streaming Protocol (RTSP) headers. By enticing a user to view a maliciously crafted RTSP movie, an attacker may cause an unexpected application termination or arbitrary code execution. This update addresses the issue by ensuring that the destination buffer is sized to contain the data.
QuickTime
CVE-ID: CVE-2007-4706
Available for: Mac OS X v10.3.9, Mac OS X v10.4.9 or later, Mac OS X v10.5 or later, Windows Vista / XP SP2
Impact: Viewing a maliciously crafted QTL file may lead to an unexpected application termination or arbitrary code execution
Description: A heap buffer overflow exists in QuickTime's handling of QTL files. By enticing a user to view a maliciously crafted QTL file, an attacker may cause an unexpected application termination or arbitrary code execution. This update addresses the issue through improved bounds checking.
QuickTime
CVE-ID: CVE-2007-4707
Available for: Mac OS X v10.3.9, Mac OS X v10.4.9 or later, Mac OS X v10.5 or later, Windows Vista / XP SP2
Impact: Multiple vulnerabilities in QuickTime's Flash media handler
Description: Multiple vulnerabilities exist in QuickTime's Flash media handler, the most serious of which may lead to arbitrary code execution. With this update, the Flash media handler in QuickTime is disabled except for a limited number of existing QuickTime movies that are known to be safe. Credit to Tom Ferris of Adobe Secure Software Engineering Team (ASSET), Mike Price of McAfee Avert Labs, and security researchers Lionel d'Hauenens & Brian Mariani of Syseclabs for reporting this issue.
QuickTime 7.3.1 may be obtained from the Software Update application, or from the Apple Downloads site:
http://www.apple.com/support/downloads/
For Mac OS X v10.5
The download file is named: "QuickTime731_Leopard.dmg"
Its SHA-1 digest is: ede5a96f039d6acdf507ce96869f5ee481acd1ed
For Mac OS X v10.4.9 or later
The download file is named: "QuickTime731_Tiger.dmg"
Its SHA-1 digest is: 27be64dafbc4b0efb7671ca5acd14941b1ed8f98
For Mac OS X v10.3.9
The download file is named: "QuickTime731_Panther.dmg"
Its SHA-1 digest is: 5f3b199e385efe9cdca84d6ffc359c1e712705b6
QuickTime 7.3.1 for Windows Vista / XP SP2 The download file is named: "QuickTimeInstaller.exe"
Its SHA-1 digest is: 9756effce45aa257bc5653a78b273b8f421cbb4c
QuickTime 7.3.1 with iTunes for Windows Vista / XP SP2 The download file is named: "iTunesSetup.exe"
Its SHA-1 digest is: e0f384fbf385f98fce3431f084b474bd092312a3
Information will also be posted to the Apple Product Security web site: http://docs.info.apple.com/article.html?artnum=61798
This message is signed with Apple's Product Security PGP key, and details are available at:
http://www.apple.com/support/security/pgp/
-----BEGIN PGP SIGNATURE-----
iQEVAwUBR2G4ycgAoqu4Rp5tAQK20wgArU87tTwK72+IE4zfczhExd439iwKe99q
YxVtkqbLDW8+nXeee5se5DGbMqJFG7NhQyFPeBYRdN82H+uhvTq2RQybpWaH8UoH
rqaOM6lzbS0p+EYBW2MUoOu0WkxmgZnMYRQq3Fg5/Q/rua9OG4hMMVrJ5rawFw8N
3/XyjgXQ+KmFJKtd9vsR63+AjsiPqwBd+94PSYokkIHxrVvG2HPyaQKQDfJliYJZ
/QGu8CfKsRCMhvMvukgayAHDvBDnKty5zfBp1IO3IDoqTztIqwWzT7JUA92u5udq
FKyO2bkMoQCDO8wIOUF4UU9kAerFBZLpl+VO93tHwNUgrVEhUA3O6Q==
=Qrx4
-----END PGP SIGNATURE-----
This advisory contains information released by the original author. Some of the information may have changed since it was released. If the issue affects you, it may be prudent to retrieve the advisory from the site of the original source to ensure that you receive the most current information concerning that problem. Reference to any specific commercial product, process, or service by trade name, trademark manufacturer, or otherwise, does not constitute or imply its endorsement, recommendation, or favouring by CPNI.
The views and opinions of authors expressed within this notice shall not be used for advertising or product endorsement purposes. CPNI shall not accept responsibility for any errors or omissions contained within this advisory. In particular, they shall not be liable for any loss or damage whatsoever, arising from or in connection with the usage of information contained within this advisory.
CSIRTUK is a member of the Forum of Incident Response and Security Teams (FIRST) and has contacts with other international Incident Response Teams (IRTs) in order to foster cooperation and coordination in incident prevention, to prompt rapid reaction to incidents, and to promote information sharing amongst its members and the community at large.
Fri, 14 Dec 2007 16:49:00 GMT
Domain affected: Technical